IBM General Parallel File System CVE-2015-0198 Unspecified Remote Code Execution Vulnerability
BID:73278
Info
IBM General Parallel File System CVE-2015-0198 Unspecified Remote Code Execution Vulnerability
| Bugtraq ID: | 73278 |
| Class: | Unknown |
| CVE: |
CVE-2015-0198 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2015 12:00AM |
| Updated: | Oct 09 2018 02:00PM |
| Credit: | Florian Grunow and Felix Wilhelm of ERNW |
| Vulnerable: |
IBM Virtualization Engine TS7700 0 IBM Smart Analytics System 7710 0 IBM Smart Analytics System 7700 0 IBM Smart Analytics System 7600 0 IBM PureData System for Operational Analytics 1.1 (A1801) IBM PureData System for Operational Analytics 1.0 (A1791) IBM PureApplication System 2.1 IBM PureApplication System 2.0 IBM InfoSphere BigInsights 3.0 1 IBM InfoSphere BigInsights 3.0 0 IBM InfoSphere BigInsights 2.1.2 IBM InfoSphere BigInsights 2.1.1 IBM InfoSphere BigInsights 3.0.0.2 IBM InfoSphere BigInsights 2.1.0.3 IBM InfoSphere BigInsights 2.1.0.2 IBM InfoSphere BigInsights 2.1.0.1 IBM InfoSphere BigInsights 2.1.0.0 IBM InfoSphere BigInsights 2.1 IBM General Parallel File System(GPFS) 4.1 IBM General Parallel File System(GPFS) 4.1.0.6 IBM General Parallel File System(GPFS) 3.5.0.23 IBM General Parallel File System(GPFS) 3.4.0.31 IBM General Parallel File System (GPFS) 3.5.0.19 IBM General Parallel File System (GPFS) 3.5.0.16 IBM General Parallel File System (GPFS) 3.5.0 IBM General Parallel File System (GPFS) 3.4.0.27 IBM General Parallel File System (GPFS) 3.4.0 IBM DB2 Workgroup Server Edition 10.5 IBM DB2 Workgroup Server Edition 10.1 IBM DB2 pureScale Feature for Enterprise Server Edition 9.8 IBM DB2 Express Edition 10.5 IBM DB2 Express Edition 10.1 IBM DB2 Enterprise Server Edition 10.5 IBM DB2 Enterprise Server Edition 10.1 IBM DB2 Connect Unlimited Edition for System z 10.5 IBM DB2 Connect Unlimited Edition for System z 10.1 IBM DB2 Connect Unlimited Edition for System i 10.5 IBM DB2 Connect Unlimited Edition for System i 10.1 IBM DB2 Connect Enterprise Edition 10.5 IBM DB2 Connect Enterprise Edition 10.1 IBM DB2 Connect Application Server Edition 10.5 IBM DB2 Connect Application Server Edition 10.1 IBM DB2 Advanced Workgroup Server Edition 10.5 IBM DB2 Advanced Workgroup Server Edition 10.1 IBM DB2 Advanced Enterprise Server Edition 10.5 IBM DB2 Advanced Enterprise Server Edition 10.1 |
| Not Vulnerable: |
IBM PureApplication System 2.1.0.1 IBM PureApplication System 2.0.0.1 Interim Fix IBM General Parallel File System(GPFS) 4.1.0.7 IBM General Parallel File System(GPFS) 3.5.0.24 IBM General Parallel File System(GPFS) 3.4.0.32 IBM DB2 Workgroup Server Edition 10.5 FP6 IBM DB2 Workgroup Server Edition 10.1 FP5 IBM DB2 Express Edition 10.5 FP6 IBM DB2 Express Edition 10.1 FP5 IBM DB2 Enterprise Server Edition 10.5 FP6 IBM DB2 Enterprise Server Edition 10.1 FP5 IBM DB2 Connect Unlimited Edition for System z 10.5 FP6 IBM DB2 Connect Unlimited Edition for System z 10.1 FP5 IBM DB2 Connect Unlimited Edition for System i 10.5 FP6 IBM DB2 Connect Unlimited Edition for System i 10.1 FP5 IBM DB2 Connect Enterprise Edition 10.5 FP6 IBM DB2 Connect Enterprise Edition 10.1 FP5 IBM DB2 Connect Application Server Edition 10.5 FP6 IBM DB2 Connect Application Server Edition 10.1 FP5 IBM DB2 Advanced Workgroup Server Edition 10.5 FP6 IBM DB2 Advanced Workgroup Server Edition 10.1 FP5 IBM DB2 Advanced Enterprise Server Edition 10.5 FP6 IBM DB2 Advanced Enterprise Server Edition 10.1 FP5 |
Discussion
IBM General Parallel File System CVE-2015-0198 Unspecified Remote Code Execution Vulnerability
IBM General Parallel File System is prone to an unspecified remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with root privileges. Failed exploit attempts will cause a denial-of-service condition.
IBM General Parallel File System is prone to an unspecified remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with root privileges. Failed exploit attempts will cause a denial-of-service condition.
Exploit / POC
IBM General Parallel File System CVE-2015-0198 Unspecified Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM General Parallel File System CVE-2015-0198 Unspecified Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM General Parallel File System CVE-2015-0198 Unspecified Remote Code Execution Vulnerability
References:
References:
- General Parallel File System Product Page (IBM)
- IBM PureApplication System is affected by security vulnerabilities (CVE-2015-019 (IBM)
- Security Bulletin: IBM General Parallel File System is affected by security vuln (IBM)
- Security Bulletin: IBM Virtualization Engine TS7700 is affected by vulnerabiliti (IBM)
- Security Bulletin: Vulnerabilities in GPFS affect InfoSphere BigInsights (CVE-20 (IBM)
- swg21962616 : Multiple security vulnerabilities have been identified in IBM Gene (IBM)