IBM WebSphere MQ Queue Manager Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	33857
Class:	Unknown
CVE:	CVE-2009-0439
Remote:	No
Local:	Yes
Published:	Feb 23 2009 12:00AM
Updated:	Feb 23 2009 05:47PM
Credit:	IBM
Vulnerable:	IBM WebSphere MQ 6.0.2 .3 IBM WebSphere MQ 6.0.2 .2 IBM WebSphere MQ 5.3.1 IBM WebSphere MQ 5.3 .0.6 IBM WebSphere MQ 5.3 .0.5 IBM WebSphere MQ 5.3 .0.1 IBM WebSphere MQ 5.3 IBM WebSphere MQ 7.0 IBM WebSphere MQ 6 IBM WebSphere MQ 5.3 Fix Pack 14
Not Vulnerable:	IBM WebSphere MQ 7.0 2 IBM WebSphere MQ 6.0.2 6

IBM WebSphere MQ Queue Manager Multiple Local Privilege Escalation Vulnerabilities

IBM WebSphere MQ Queue Manager is prone to multiple unspecified local privilege-escalation vulnerabilities.

Attackers can exploit these issues to gain elevated privileges, which may result in the complete compromise of affected computers.

IBM WebSphere MQ Queue Manager Multiple Local Privilege Escalation Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere MQ Queue Manager Multiple Local Privilege Escalation Vulnerabilities

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

IBM WebSphere MQ Queue Manager Multiple Local Privilege Escalation Vulnerabilities

References:

• Recommended Fixes for WebSphere MQ (IBM)
  
• WebSphere MQ Homepage (IBM)
  
• IBM WebSphere MQ queue manager privilege escalation (IBM)