PT-2009-4271 · Ibm · Ibm Hardware Management Console+1

Published 2009-05-28 · Updated 2017-08-17 · CVE-2009-1806

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: IBM Hardware Management Console (HMC) version 7 release 3.4.0 SP2

Description: The issue is related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server (VIOS) partitions when Active Memory Sharing is used. It has unknown impact and attack vectors.

Recommendations: For IBM Hardware Management Console (HMC) version 7 release 3.4.0 SP2, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2009-1806

Affected Products

Ibm Hardware Management Console

Virtual I/O Server

References · 6

• http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1806 · Security Note
• http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4671 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50910 · Note
• http://www-933.ibm.com/support/fixcentral/firmware/readme?fixid=MH01181 · Note
• http://securityfocus.com/bid/35113 · Note