Some vulnerabilities have been reported in IBM HMC, which can be exploited by malicious, local users to gain escalated privileges and potentially by malicious people to compromise a vulnerable system.

1) Unspecified errors in some HMC commands can be exploited to gain escalated privileges.

2) An Off-By-One error within OpenSSL can potentially be exploited to compromise a vulnerable system.

The vulnerabilities are reported in version 6 release 1.3 and in version 7 release 3.2.0. Prior versions may also be affected.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM:
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers