PT-2010-2645 · Ibm · Ibm Aix

Published 2010-03-03 · Updated 2010-03-04 · CVE-2010-0922

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX version 5.3 with SP 5300-11-02

Description The issue allows attackers to cause a denial of service, specifically an LDAP login failure, via unknown vectors. It is noted that some details are obtained from third-party information and there may be no attacker role, with the issue potentially being triggered entirely by an administrator's installation of an official service pack.

Recommendations For IBM AIX version 5.3 with SP 5300-11-02, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2010-0922

Affected Products

Ibm Aix

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-0922 · Security Note
• http://ibm.com/support/docview.wss?uid=isg1IZ69977 · Vendor Advisory
• http://securityfocus.com/bid/38444 · Note
• ftp://public.dhe.ibm.com/aix/efixes/iz69977/README.txt · Note
• http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4956 · Note