IBM Platform Symphony SOAP Request CVE-2013-5387 Remote Buffer Overflow Vulnerability

Bugtraq ID:	63517
Class:	Boundary Condition Error
CVE:	CVE-2013-5387
Remote:	Yes
Local:	No
Published:	Oct 30 2013 12:00AM
Updated:	Feb 17 2014 12:46AM
Credit:	AbdulAziz Hariri
Vulnerable:
Not Vulnerable:

IBM Platform Symphony SOAP Request CVE-2013-5387 Remote Buffer Overflow Vulnerability

IBM Platform Symphony is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Attackers can execute arbitrary code in the context of the affected application. Failed exploit attempts will cause the application to crash, resulting in denial-of-service conditions.

IBM Platform Symphony 5.2, 6.1.0, and 6.1.1 are vulnerable; other versions may also be affected.

IBM Platform Symphony SOAP Request CVE-2013-5387 Remote Buffer Overflow Vulnerability

An attacker can exploit this issue using readily available tools.

IBM Platform Symphony SOAP Request CVE-2013-5387 Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Platform Symphony SOAP Request CVE-2013-5387 Remote Buffer Overflow Vulnerability

References: