Martin O'Neal has reported a vulnerability in IBM Tivoli Management Framework, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the endpoint (lcfd process) that causes the LCF sub-component to stop responding to any new connections, if a connection is established to the endpoint and dropped without sending any data.

Successful exploitation causes the lcfd process to become unresponsive, until the service is restarted.

The vulnerability has been reported in version 4.1.1, endpoint version 41015.

Solution
Apply the latest LCF Patch (4.1.1-LCF-0020)
Further details available in Customer Area

Provided and/or discovered by
Martin O'Neal, Corsaire.

Changelog
Further details available in Customer Area

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg21210334

Corsaire:
http://www.corsaire.com/advisories/c041127-001.txt

Deep Links
Links available in Customer Area