IBM Hardware Management Console Pegasus CIM Server Denial Of Service Vulnerability

Bugtraq ID:	27484
Class:	Unknown
CVE:	CVE-2008-0495
Remote:	Yes
Local:	No
Published:	Jan 29 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	The vendor reported this issue.
Vulnerable:	IBM Pegasus CIM Server 2.6.1 IBM Pegasus CIM Server 2.5.1 IBM Hardware Management Console (HMC) 7.3.2.0
Not Vulnerable:

IBM Hardware Management Console Pegasus CIM Server Denial Of Service Vulnerability

IBM Hardware Management Console (HMC) is prone to a denial-of-service vulnerability due to an unspecified error in the Pegasus CIM Server.

Remote attackers can exploit this issue to deny service to legitimate users.

The issue affects HMC V7 R3.2.0; other versions may also be vulnerable.

IBM Hardware Management Console Pegasus CIM Server Denial Of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Hardware Management Console Pegasus CIM Server Denial Of Service Vulnerability

Solution:
IBM released a patch to address this issue. Please see the references for more information.


IBM Pegasus CIM Server 2.5.1

• IBM pegasus_ifix.tar
  ftp://aix.software.ibm.com/aix/efixes/security/pegasus_ifix.tar

IBM Pegasus CIM Server 2.6.1

• IBM pegasus_ifix.tar
  ftp://aix.software.ibm.com/aix/efixes/security/pegasus_ifix.tar

IBM Hardware Management Console Pegasus CIM Server Denial Of Service Vulnerability

References:

• Cumulative history and Readme for use with HMC Version 7 (IBM)
  
• IBM Hardware Management Console (IBM)