Boletines de Vulnerabilidades

Security Bulletin: Multiple vulnerabilities in OpenSSL affect MegaRAID Storage Manager (CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3567)


Información sobre el sistema

   
Software afectado IBM

Descripción

There are multiple vulnerabilities in OpenSSL that is used by MegaRAID Storage Manager. OpenSSL vulnerabilities along with SSL 3 Fallback protection (TLS_FALLBACK_SCSV) were disclosed on October 15, 2014 and on August 6, 2014 by the OpenSSL Project. OpenSSL is used by MegaRAID Storage Manager. MegaRAID Storage Manager has addressed the applicable CVEs and included the SSL 3.0 Fallback protection (TLS_FALLBACK_SCSV) provided by OpenSSL. CVE(s): CVE-2014-3505, CVE-2014-3506, CVE-2014-3507,

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_multiple_vulnerabilities_in_openssl_affect_megaraid_storage_manager_cve_2014_3505_cve_2014_3506_cve_2014_3507_cve_2014_3510_cve_2014_3567?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-3505 ,CVE-2014-3506 ,CVE-2014-3507 ,CVE-2014-3510 ,CVE-2014-3567 ,CVE-2015-1781 ,CVE-2013-7423 ,CVE-2015-0255 ,CVE-2015-0488 ,CVE-2015-0138 ,CVE-2015-0204 and CVE-2015-2808.

Histórico de versiones

Versión Comentario Data
1.0 Advisory issued 2015-05-30
Ministerio de Defensa
CNI
CCN
CCN-CERT