PT-2010-3700 · Ibm · Ibm Communications Server For Aix+1

Published 2010-05-27 · Updated 2017-08-17 · CVE-2010-2090

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Communications Server for Windows version 6.1.3 IBM Communications Server for AIX (aka CSAIX or CS/AIX) versions prior to 6.3.1.2

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending APPC data containing a GDSID variable with a GDS length that is too small.

Recommendations For IBM Communications Server for Windows version 6.1.3, update to a version that includes the fix for this issue. For IBM Communications Server for AIX versions prior to 6.3.1.2, update to version 6.3.1.2 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-2090

Affected Products

Ibm Communications Server For Aix

Ibm Communications Server For Windows

References · 8

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR36026 · Vendor Advisory
• http://vupen.com/english/advisories/2010/1244 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2090 · Security Note
• http://secunia.com/advisories/39909 · Vendor Advisory
• http://securityfocus.com/bid/40372 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58874 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg24013012 · Note