PT-2009-3158 · Ibm · Ibm Txseries For Multiplatforms

Published 2009-02-25 · Updated 2017-08-08 · CVE-2009-0505

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM TXSeries for Multiplatforms version 6.2 GA

Description The issue is related to the CICS listener in IBM TXSeries for Multiplatforms, which may allow remote authenticated users to cause a denial of service or have other unspecified impacts. This occurs when the CICS listener waits for a forcepurge acknowledgement from the CICS Application Server after an eci response timeout, and the acknowledgement is slow or nonexistent.

Recommendations For IBM TXSeries for Multiplatforms version 6.2 GA, consider implementing measures to handle forcepurge acknowledgements more efficiently, such as setting timeouts or implementing retry mechanisms, to minimize the risk of denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-0505

Affected Products

Ibm Txseries For Multiplatforms

References · 6

• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg24019725 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0505 · Security Note
• http://vupen.com/english/advisories/2009/0911 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48885 · Note
• http://securityfocus.com/bid/33883 · Note