IBM Java CVE-2013-4041 Unspecified Security Bypass Vulnerability

Bugtraq ID:	63619
Class:	Unknown
CVE:	CVE-2013-4041
Remote:	Yes
Local:	No
Published:	Nov 05 2013 12:00AM
Updated:	May 06 2014 08:04PM
Credit:	IBM
Vulnerable:	SuSE SUSE Linux Enterprise Server 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 SP3 LTSS + Linux kernel 2.6.5 S.u.S.E. SUSE CORE 9 for x86 S.u.S.E. CORE 9 Red Hat Network Satellite Server (for RHEL 6) 5.4 Red Hat Network Satellite Server (for RHEL 5) 5.4 Red Hat Enterprise Linux Workstation Supplementary 6 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Server Supplementary 6 Red Hat Enterprise Linux HPC Node Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 5 client IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 8.0.0.4 IBM Websphere Application Server 8.0.0.1 IBM Websphere Application Server 8.0.0.0 IBM Websphere Application Server 7.0.0.17 IBM Websphere Application Server 7.0.0.14 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0.0.0 IBM Websphere Application Server 6.1.0.45 IBM Websphere Application Server 6.1.0.43 IBM Tivoli Storage Productivity Center 4.2.1.185 IBM Tivoli Storage Productivity Center 4.2.1 Fix Pack 4 IBM Tivoli Storage Productivity Center 4.2.1 IBM OS/400 V6R1M0 IBM Lotus Notes 8.5.3 IBM Lotus Notes 8.5.2 IBM Lotus Notes 8.5.1 IBM Lotus Notes 8.5.1 IBM Lotus Notes 8.0.2 IBM Lotus Notes 8.5.2.3 IBM Lotus Notes 8.5.2.2 IBM Lotus Notes 8.5.2.1 IBM Lotus Notes 8.5.2.0 IBM Lotus Notes 8.5.2 FP2 IBM Lotus Notes 8.5.1.5 IBM Lotus Notes 8.5.1.4 IBM Lotus Notes 8.5.1.3 IBM Lotus Notes 8.5.1.2 IBM Lotus Notes 8.5.1 FP5 IBM Lotus Notes 8.5.0.1 IBM Lotus Notes 8.5.0.0 IBM Lotus Notes 8.5 IBM Lotus Notes 8.0.2.6 IBM Lotus Notes 8.0.2.5 IBM Lotus Notes 8.0.2.4 IBM Lotus Notes 8.0.2.3 IBM Lotus Notes 8.0.2.2 IBM Lotus Notes 8.0.2.1 IBM Lotus Notes 8.0.2.0 IBM Lotus Notes 8.0.2 FP6 IBM Lotus Notes 8.0 IBM Lotus Domino 8.5.3 IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5.1 Fix Pack 2 IBM Lotus Domino 8.5.1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.0.1 IBM Lotus Domino 8.5FP1 IBM Lotus Domino 8.5.3FP1 IBM Lotus Domino 8.5.2 FP4 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP2 IBM Lotus Domino 8.5.1FP5 IBM Lotus Domino 8.5.1.1 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0.2 FP4 IBM Lotus Domino 8.0 IBM Java SDK 1.4.2 IBM Java SDK 6 SR10 IBM Java SDK 6 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3
Not Vulnerable:

IBM Java CVE-2013-4041 Unspecified Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Java CVE-2013-4041 Unspecified Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Java CVE-2013-4041 Unspecified Security Bypass Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Endpoint Manager for Remote Control Interim Fix 9.0.0-TIV-IEMRC900-IF0003 (IBM)
  
• IBM Endpoint Manager for Remote Control Interim Fix 9.0.1-TIV-IEMRC901-IF0001 (IBM)
  
• IBM Smart Analytics System 5600 is affected by multiple vulnerabilities in the I (IBM)
  
• IBM Tivoli Composite Application Manager for Transactions Response Time 7.4 Inte (IBM)
  
• InfoSphere Streams Applications Using Custom Java Operators May Be Affected (IBM)
  
• IV53964: SECURITY APAR,MULTIPLE OPENSSL VULNERABILITIES IN IBM ENDPOINT MANAGER (IBM)
  
• Security Alert: Tivoli Policy Driven Software Distribution (Oracle CPU October 2 (IBM)
  
• Security Bulletin: IBM Lotus Expeditor fixes for multiple vulnerabilities in IBM (IBM)
  
• Security Bulletin: IBM Notes & Domino fixes for multiple vulnerabilities (CVE-20 (IBM)
  
• Security Bulletin: IBM Tivoli Composite Application Manager for Transactions aff (IBM)
  
• Security Bulletin: Multiple IBM SDK Java Technology Edition, Version 6 security (IBM)
  
• Security Bulletin: Multiple Java security vulnerabilities addressed in IBM Endpo (IBM)
  
• Security Bulletin: Multiple OpenSSL vulnerabilities in IBM Endpoint Manager for (IBM)
  
• Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for WebS (IBM)
  
• Security Bulletin: Multiple vulnerabilities in current releases of the IBM SDK J (IMB)
  
• Security Bulletin: Multiple vulnerabilities in IBM WebSphere Real Time (IBM)
  
• Security Bulletin: Potential security vulnerabilities with JavaTM SDKs (IBM)
  
• Security Bulletin: Security Vulnerabilities for IBM Java on AIX (IBM)
  
• Security Bulletin: Tivoli Storage Productivity Center - Oracle CPU October 2013 (IBM)
  
• SI51086 - JVA-RUN JDK60-32 IBM Technology for Java SR 15 (IBM)
  
• SI51087 - JVA-RUN JDK60-64 IBM Technology for Java SR 15 (IBM)
  
• Tivoli Provisioning Manager, Interim Fix 7.1.1-TIV-TPM-IF00009 (IBM)