IBM BladeCenter Advanced Management Module Denial of Service Vulnerability

Bugtraq ID:	39499
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-1460
Remote:	Yes
Local:	No
Published:	Apr 15 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Alexey Sintsov
Vulnerable:	IBM BladeCenter Advanced Management Module 2.50 G IBM BladeCenter Advanced Management Module 2.50 IBM BladeCenter Advanced Management Module 1.42U build BPET42U IBM BladeCenter Advanced Management Module 1.42U build BBET42U IBM BladeCenter Advanced Management Module 1.42
Not Vulnerable:	IBM BladeCenter Advanced Management Module bpet50g

IBM BladeCenter Advanced Management Module Denial of Service Vulnerability

The IBM BladeCenter Advanced Management Module (AMM) is prone to a remote denial-of-service vulnerability

Successful exploits will cause the affected service to reboot, denying service to legitimate users.

IBM BladeCenter Advanced Management Module Denial of Service Vulnerability

The following example is available:

• /data/vulnerabilities/exploits/39499.pl

IBM BladeCenter Advanced Management Module Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

IBM BladeCenter Advanced Management Module Denial of Service Vulnerability

References:

• Denial of Service attack on AMM fixed - IBM BladeCenter (IBM)
  
• [DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability (Digital Security Research Group)