IBM HMC Apache2 / OpenSSL Sicherheitslücken - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

IBM HMC Apache2 / OpenSSL Sicherheitslücken

Secunia Advisory:	SA22523
Herausgegeben:	2006-10-26

Gefahrenstufe:	Mittelgradig kritisch
Auswirkung:	Sicherheitsumgehung Cross-Site-Scripting DoS Systemzugriff
Von Wo:	Aus dem Internet
Lösungsstatus:	Hersteller-Workaround

OS:	IBM Hardware Management Console (HMC)


CVE reference:	CVE-2005-2700 (Secunia mirror) CVE-2005-3357 (Secunia mirror) CVE-2006-3747 (Secunia mirror) CVE-2006-3918 (Secunia mirror) CVE-2006-4339 (Secunia mirror)



Beschreibung: IBM hat einige Sicherheitslücken in HMC eingeräumt, die böswillige Personen ausnutzen können, um Cross-Site Scripting Attacken durchzuführen, einen DoS (Denial of Service) zu verursachen, und potenziell um bestimmte Sicherheitsrestriktionen zu umgehen oder ein verwundbares System zu kompromittieren. Weitere Informationen: SA16700 SA18307 SA21172 SA21197 SA21709 Lösung: Installieren Sie die Patches. HMC Version 6.1: Installieren Sie PTF MH00856. HMC Version 5.2: Installieren Sie PTF MH00857. HMC Version 4.5: Installieren Sie PTF MH00858. HMC Version 3.3.7: Installieren Sie PTF U809968. Original Advisory: http://www14.software.ibm.com/webapp/...criptions/pqvcmjd?mode=18&ID=3117 Andere Referenzen: SA16700: http://secunia.com/advisories/16700/ SA18307: http://secunia.com/advisories/18307/ SA21172: http://secunia.com/advisories/21172/ SA21197: http://secunia.com/advisories/21197/ SA21709: http://secunia.com/advisories/21709/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

4 Related Secunia Security Advisories

1. IBM Hardware Management Console Pegasus CIM Denial of Service

2. IBM HMC Version 3 Ausweitung von Rechten

3. IBM HMC Mehrere Sicherheitslücken

4. IBM HMC OpenSSH / OpenSSL Sicherheitslücken

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	AJ E-Commerce "cid" SQL Injection Vulnerability

2.	PostNuke pnFlashGames Module "cid" SQL Injection

3.	X11 libXfont CID Encoded Fonts Integer Overflows

4.	VP-ASP Shopping Cart "cid" SQL Injection Vulnerability

5.	PHP-Nuke "pollID" Parameter SQL Injection Vulnerability

6.	Sun Solaris System Management Agent SNMP Daemon Buffer Overflow

7.	BlackBerry Enterprise Server PDF Processing Vulnerability

8.	AlstraSoft Video Share Enterprise "UID" SQL Injection

9.	Facebook Photo Uploader ActiveX Control Property Handling Buffer Overflow

10.	IBM WebSphere Application Server Unspecified Vulnerability