IBM Tivoli Management Framework Endpoint Remote Denial Of Service Vulnerability

Bugtraq ID:	14194
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 08 2005 12:00AM
Updated:	Jul 08 2005 12:00AM
Credit:	NISCC (National Infrastructure Security Coordination Centre) is credited with the discovery of this vulnerability.
Vulnerable:	IBM Tivoli Management Framework 4.1.1
Not Vulnerable:

IBM Tivoli Management Framework Endpoint Remote Denial Of Service Vulnerability

IBM Tivoli Management Framework Endpoint is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle exceptional conditions.

This vulnerability allows remote attackers to cause the software to refuse new connections for 5 minute periods, denying service to legitimate users. By repeating the attack, attackers may create a sustained denial of service condition.

IBM Tivoli Management Framework Endpoint Remote Denial Of Service Vulnerability

An exploit is not required.

IBM Tivoli Management Framework Endpoint Remote Denial Of Service Vulnerability

Solution:
IBM has released an advisory and fixes to address this issue. Please see the referenced advisory for further information.


IBM Tivoli Management Framework 4.1.1

• IBM Tivoli Framework Patch 4.1.1-LCF-0020
  http://www-1.ibm.com/support/docview.wss?uid=swg24009815

IBM Tivoli Management Framework Endpoint Remote Denial Of Service Vulnerability

References:

• A potential Denial of Service has been identified for Tivoli Management Framewor (IBM)