Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in RC4 stream cipher affects Connect:Express for UNIX (CVE-2015-2808)

   
Affected software IBM
 
The RC4 “Bar Mitzvah” Attack for SSL/TLS affects Connect:Express for UNIX CVE(s): CVE-2015-2808 Affected product(s) and affected version(s): IBM Sterling Connect:Express for UNIX 1.4.6 - All versions prior to 1.4.6.1 iFix 146-109 IBM Sterling Connect:Express for UNIX 1.5.0 - All versions prior to 1.5.0.12 (included) Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_rc4_stream_cipher_affects_connect_express_for_unix_cve_2015_2808?lang=en_us