PT-2013-4068 · Ibm · Ibm Sterling Control Center

Published 2013-06-19 · Updated 2017-08-29 · CVE-2013-2968

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Sterling Control Center (SCC) versions 5.2 through 5.2.0.8 IBM Sterling Control Center (SCC) versions 5.3 through 5.3.0.3 IBM Sterling Control Center (SCC) versions 5.4 through 5.4.0.1

Description The issue allows remote authenticated users to cause a denial of service. This can be achieved by using a large file that lacks end-of-line characters.

Recommendations For versions 5.2 through 5.2.0.8, update to version 5.2.0.9 or later. For versions 5.3 through 5.3.0.3, update to version 5.3.0.4 or later. For versions 5.4 through 5.4.0.1, update to a version later than 5.4.0.1.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-2968

Affected Products

Ibm Sterling Control Center

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-2968 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21640348 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83859 · Note