Boletines de Vulnerabilidades

IBM Security Bulletin: IBM WebSphere MQ - Potential denial of service when using the TCP listener (CVE-2014-0911)


Información sobre el sistema

   
Software afectado IBM

Descripción

A denial of service vulnerability exists and could affect customers using the TCP listener (inetd) on UNIX and IBM i platforms. This vulnerability does not affect customers using the MQ listener. CVE(s): CVE-2014-0911 Affected product(s) and affected version(s): WebSphere MQ 7.1.x (UNIX and IBM i) WebSphere MQ 7.5.x (UNIX only) Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_websphere_mq_potential_denial_of_service_when_using_the_tcp_listener_cve_2014_0911?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0911 ,CVE-2013-4286 ,CVE-2014-0033 ,CVE-2013-4322 ,CVE-2014-0944 ,CVE-2014-0945 ,CVE-2014-0946 and CVE-2014-0050.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-05-06

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT