5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
IBM Flex System Manager (FSM) is affected by a ntp vulnerability that could result in a denial of service
IBM Flex System Manager (FSM) is affected by a ntp vulnerability that could result in a denial of service
Vulnerability Details:
CVE-ID: CVE-2013-5211
Description: IBM Flex System Manager allows a remote attacker to use a valid NTP server to cause a potential denial of service attack by forging ntp requests.
CVSS Base Score: 5.0
CVSS Temporal Score: See <http://xforce.iss.net/xforce/xfdb/90143>
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)
From the FSM command line enter lsconfig -V to determine the level of FSM installed.
NON-AFFECTED PRODUCTS and VERSIONS
Flex System Manager 1.3.2.x
Product | VRMF | APAR | Remediation |
---|---|---|---|
Flex System Manager | 1.1.x.x | IT00278 | Upgrade to FSM 1.3.2.0, or open a PMR with support to request an APAR |
Flex System Manager | 1.2.0.x | IT00278 | fsmfix1.2.0.0_IT00252 |
Flex System Manager | 1.2.1.x | IT00278 | fsmfix1.2.1.0_IT00252 |
Flex System Manager | 1.3.0.x | IT00278 | fsmfix1.3.0.0_IT00252 |
Flex System Manager | 1.3.1.x | IT00278 | fsmfix1.3.1.0_IT00252 |
None Known
Related Information:
IBM Secure Engineering Web Portal
Acknowledgement
None
Change History
01 July 2014: Original Copy Published
Note: According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an “industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response.” IBM PROVIDES THE CVSS SCORES “AS IS” WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
CPE | Name | Operator | Version |
---|---|---|---|
flex system manager | eq | 1.1.x | |
flex system manager | eq | 1.2.0.x | |
flex system manager | eq | 1.2.1.x | |
flex system manager | eq | 1.3.0.x | |
flex system manager | eq | 1.3.1.x |