IBM Hardware Management Console RMC Daemon Remote Denial Of Service Vulnerability

Bugtraq ID:	32181
Class:	Unknown
CVE:	CVE-2008-5035
Remote:	Yes
Local:	No
Published:	Nov 07 2008 12:00AM
Updated:	May 07 2015 05:21PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	IBM Hardware Management Console (HMC) 7 R3.3.0 SP2 IBM Hardware Management Console (HMC) 7 R3.2.0 SP1
Not Vulnerable:

IBM Hardware Management Console RMC Daemon Remote Denial Of Service Vulnerability

IBM Hardware Management Console (HMC) is prone to a remote denial-of-service vulnerability.

Remote attackers can exploit this issue to cause the Resource Monitoring and Control (RMC) daemon to crash or hang, denying service to legitimate users.

HMC V7R3.3.0 SP2 and V7R3.2.0 SP1 are vulnerable; other versions may also be affected.

IBM Hardware Management Console RMC Daemon Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Hardware Management Console RMC Daemon Remote Denial Of Service Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

IBM Hardware Management Console RMC Daemon Remote Denial Of Service Vulnerability

References:

• Announcing PTF MH01133 for HMC Version 7 Release 3.2.0 SP1 (IBM)
  
• Announcing PTF MH01134 for HMC Version 7 Release 3.3.0 SP2 (IBM)
  
• IBM Hardware Management Console Home Page (IBM)