IBM Storwize V7000 Unified CVE-2013-0500 File Handling Security Vulnerability

Bugtraq ID:	63182
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-0500
Remote:	Yes
Local:	No
Published:	Oct 15 2013 12:00AM
Updated:	Oct 23 2013 12:57AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Scale Out Network Attached Storage 1.3.0.5 IBM Scale Out Network Attached Storage 1.3.0.4
Not Vulnerable:

IBM Storwize V7000 Unified CVE-2013-0500 File Handling Security Vulnerability

IBM Storwize V7000 Unified is prone to a remote security vulnerability.

Successful exploits allow attackers to bypass certain security restrictions to obtain sensitive information, modify program or files or crash the system causing a denial-of-service condition.

IBM Storwize V7000 Unified 1.3.0.0 through 1.4.1.1 are vulnerable.

IBM Storwize V7000 Unified CVE-2013-0500 File Handling Security Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Storwize V7000 Unified CVE-2013-0500 File Handling Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Storwize V7000 Unified CVE-2013-0500 File Handling Security Vulnerability

References: