IBM Web-based System Manager Unspecified Denial of Service Vulnerability

Bugtraq ID:	24240
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 30 2007 12:00AM
Updated:	Jun 04 2007 06:00PM
Credit:	The vendor disclosed this issue.
Vulnerable:	IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable:

IBM Web-based System Manager Unspecified Denial of Service Vulnerability

IBM Web-based System Manager (WebSM) is prone to an unspecified denial-of-service vulnerability.

An attacker can exploit this issue to consume excessive memory, resulting in a denial-of-service condition.

IBM Web-based System Manager Unspecified Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

IBM Web-based System Manager Unspecified Denial of Service Vulnerability

Solution:
The vendor released updates to address this issue. Please see the references for more information.


IBM AIX 5.2

• IBM websm_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/websm_ifix.tar.Z

IBM AIX 5.3

• IBM websm_ifix.tar.Z
  ftp://aix.software.ibm.com/aix/efixes/security/websm_ifix.tar.Z

IBM Web-based System Manager Unspecified Denial of Service Vulnerability

References:

• IBM Web-based System Manager Homepage (IBM)
  
• IY95637: POTENTIAL SECURITY ISSUE IN SYSMGT.WEBSM.RTE (IBM)
  
• IY95526: POTENTIAL SECURITY ISSUE IN SYSMGT.WEBSM.RTE (IBM)