IBM CICS Transaction Server Unspecified Security Vulnerability

Bugtraq ID:	67944
Class:	Design Error
CVE:	CVE-2014-3042
Remote:	Yes
Local:	No
Published:	Jun 06 2014 12:00AM
Updated:	Jun 06 2014 12:00AM
Credit:	IBM
Vulnerable:	IBM CICS Transaction Server 5.1 For z/OS IBM CICS Transaction Server 4.2 For z/OS IBM CICS Transaction Server 4.1 For z/OS IBM CICS Transaction Server 3.2 For z/OS IBM CICS Transaction Server 3.1 For z/OS
Not Vulnerable:

IBM CICS Transaction Server Unspecified Security Vulnerability

IBM CICS Transaction Server is prone to an unspecified security vulnerability.

Little is known about this issue or its effects at this time. We will update this BID as more information emerges.

IBM CICS Transaction Server Unspecified Security Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

IBM CICS Transaction Server Unspecified Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM CICS Transaction Server Unspecified Security Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Apply CICS TS PTFs to avoid storage overlays when using CEMT (IBM)