IBM Rational ClearQuest Unspecified Data Corruption - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

IBM Rational ClearQuest Unspecified Data Corruption

Secunia Advisory:	SA26899
Release Date:	2007-09-25
Last Update:	2007-12-20

Critical:	Less critical
Impact:	Manipulation of data
Where:	From local network
Solution Status:	Vendor Patch

Software:	IBM Rational ClearQuest 7.x Rational ClearQuest 2003

CVE reference:	CVE-2007-5090 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been reported in IBM Rational ClearQuest, which can be exploited by malicious users to corrupt data. The vulnerability is caused due to an unspecified error and can be exploited to cause data corruption. No further information is available at this time. The vulnerability reportedly affects Microsoft SQL Server and IBM DB2 based ClearQuest databases. Solution: Apply patches. -- ClearQuest 7.0.0.0 -- Apply FixPack 7.0.0.2. http://ibm.com/support/docview.wss?rs=988&uid=swg24015235 -- ClearQuest 7.0.1 -- Apply FixPack 7.0.1.1. http://ibm.com/support/docview.wss?rs=988&uid=swg24016720 -- ClearQuest 2003.06.16 -- Apply Patch 2007D for Microsoft Windows. http://ibm.com/support/docview.wss?rs=988&uid=swg24014394 Apply 2003.06.00 patch 20 for UNIX/Linux. http://ibm.com/support/docview.wss?rs=988&uid=swg24010305 Provided and/or discovered by: Reported by the vendor. Changelog: 2007-09-28: Added CVE reference. 2007-10-31: Updated "Description" section. 2007-12-20: Updated "Solution" section. Removed "Rational ClearQuest 2002" from affected software list. Original Advisory: http://www-1.ibm.com/support/docview.wss?uid=swg21268116



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

6 Related Secunia Security Advisories

1. IBM Rational ClearQuest Cross-Site Scripting Vulnerabilities

2. IBM Rational ClearQuest Web User Enumeration Weakness

3. IBM Rational ClearQuest Web Attachments Script Insertion

4. Rational ClearQuest Apache Denial of Service and Code Execution

5. IBM HTTP Server PCRE and Byte-Range Filter Vulnerabilities

6. Rational ClearQuest Cross-Site Scripting Vulnerability

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Linux Kernel LDT Buffer Size Handling Vulnerability

2.	OpenBSD BIND Query Port DNS Cache Poisoning

3.	Drupal Session Fixation Vulnerability

4.	Red Hat update for thunderbird

5.	Apple Safari Cross-Domain Cookie Injection Vulnerability

6.	IPCop update for perl

7.	Slackware update for dnsmasq

8.	Red Hat update for kernel

9.	Ubuntu update for php

10.	dnsmasq Denial of Service and DNS Cache Poisoning