PT-2010-3138 · Ibm · Ibm Bladecenter

Published 2010-04-16 · Updated 2018-10-10 · CVE-2010-1460

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM BladeCenter with Advanced Management Module (AMM) firmware versions prior to bpet50g

Description The issue allows remote attackers to cause a denial of service, resulting in a management module reboot, by sending TCP packets with malformed application data. This is due to improper interrupt sharing for USB and iSCSI.

Recommendations For IBM BladeCenter with Advanced Management Module (AMM) firmware versions prior to bpet50g, update the firmware to version bpet50g or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-1460

Affected Products

Ibm Bladecenter

References · 6

• 🔥 https://exploit-db.com/exploits/12252 · Exploit
• 🔥 http://securityfocus.com/bid/39499 · Exploit
• http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5083945&brandind=5000020 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-1460 · Security Note
• http://securityfocus.com/archive/1/510744/100/0/threaded · Note
• http://dsecrg.com/pages/vul/show.php?id=149 · Note