A security issue and two vulnerabilities have been reported in IBM WebSphere MQ, which can be exploited by malicious people to conduct spoofing attacks and cause a DoS (Denial of Service).

1) An error in the server message channel agent when handling address alignment exception on a Solaris queue manager can be exploited to render the service unusable.

Note: This vulnerability only affects the Solaris platform.

2) The application bundles a vulnerable version of the GSKit component.

For more information:
SA50069

The security issue and the vulnerabilities are reported in versions 7.0.1, 7.1, and 7.5.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM (IC82725, IC87061):
http://www.ibm.com/support/docview.wss?uid=swg21610285
http://www.ibm.com/support/docview.wss?uid=swg21614483

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers