IBM PowerHA Cluster Management Unauthorized Access Vulnerability
BID:36931
Info
IBM PowerHA Cluster Management Unauthorized Access Vulnerability
| Bugtraq ID: | 36931 |
| Class: | Access Validation Error |
| CVE: |
CVE-2009-3900 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 04 2009 12:00AM |
| Updated: | Apr 13 2015 09:06PM |
| Credit: | IBM |
| Vulnerable: |
IBM PowerHA Cluster Management 6.1 0 IBM PowerHA Cluster Management 5.5 2 IBM PowerHA Cluster Management 5.5 0 IBM PowerHA Cluster Management 5.4.1 6 IBM PowerHA Cluster Management 5.4.1 0 IBM PowerHA Cluster Management 5.4 2 IBM PowerHA Cluster Management 5.4 |
| Not Vulnerable: | |
Discussion
IBM PowerHA Cluster Management Unauthorized Access Vulnerability
IBM PowerHA Cluster Management is prone to a remote unauthorized-access vulnerability.
Attackers can exploit this issue to make arbitrary changes to the AIX configuration without proper authorization. This may lead to further attacks.
This issue affects PowerHA Cluster Management 5.4, 5.4.1, 5.5, and 6.1 on AIX 5.3 and AIX 6.1 platforms.
IBM PowerHA Cluster Management is prone to a remote unauthorized-access vulnerability.
Attackers can exploit this issue to make arbitrary changes to the AIX configuration without proper authorization. This may lead to further attacks.
This issue affects PowerHA Cluster Management 5.4, 5.4.1, 5.5, and 6.1 on AIX 5.3 and AIX 6.1 platforms.
Exploit / POC
IBM PowerHA Cluster Management Unauthorized Access Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM PowerHA Cluster Management Unauthorized Access Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
IBM PowerHA Cluster Management 5.4
IBM PowerHA Cluster Management 5.4 2
IBM PowerHA Cluster Management 5.4.1 6
IBM PowerHA Cluster Management 5.4.1 0
IBM PowerHA Cluster Management 5.5 2
IBM PowerHA Cluster Management 5.5 0
IBM PowerHA Cluster Management 6.1 0
Solution:
The vendor has released an advisory and updates. Please see the references for details.
IBM PowerHA Cluster Management 5.4
-
IBM haport_fix.tar
ftp://aix.software.ibm.com/aix/efixes/security/haport_fix.tar
IBM PowerHA Cluster Management 5.4 2
-
IBM haport_fix.tar
ftp://aix.software.ibm.com/aix/efixes/security/haport_fix.tar
IBM PowerHA Cluster Management 5.4.1 6
-
IBM haport_fix.tar
ftp://aix.software.ibm.com/aix/efixes/security/haport_fix.tar
IBM PowerHA Cluster Management 5.4.1 0
-
IBM haport_fix.tar
ftp://aix.software.ibm.com/aix/efixes/security/haport_fix.tar
IBM PowerHA Cluster Management 5.5 2
-
IBM haport_fix.tar
ftp://aix.software.ibm.com/aix/efixes/security/haport_fix.tar
IBM PowerHA Cluster Management 5.5 0
-
IBM haport_fix.tar
ftp://aix.software.ibm.com/aix/efixes/security/haport_fix.tar
IBM PowerHA Cluster Management 6.1 0
-
IBM haport_fix.tar
ftp://aix.software.ibm.com/aix/efixes/security/haport_fix.tar
References
IBM PowerHA Cluster Management Unauthorized Access Vulnerability
References:
References: