Security Bulletin: IBM Pure Power Integrated Manager (PPIM) is affected by multiple ntp vulnerabilities

Summary Multiple security vulnerabilities have been discovered in ntp embedded in the IBM PPIM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2015-8138 DESCRIPTION: NTP could allow a remote attacker to bypass security restrictions. By sending a specially crafted packet wi...

Security Bulletin: Vulnerability in libssh2 affects PowerKVM (CVE-2015-1782)

Summary A vulnerability in libssh2 CVE-2015-1782 affects PowerKVM. Vulnerability Details CVEID: CVE-2015-1782 DESCRIPTION: libssh2 is vulnerable to a denial of service, caused by an error in kexagreemethods function. By sending a specially-craftedlity to cause the system to stop responding...

Security Bulletin: Multiple vulnerabilities in curl affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in curl. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-3613 DESCRIPTION: cURL/libcURL could allow a remote attacker to bypass security restrictions, caused by the failure to properly detect and reject domain name...

Security Bulletin: IBM Flex System Manager (FSM) is affected by a vulnerability in rpcbind (CVE-2015-7236)

Summary A security vulnerability has been discovered in rpcbind that is embedded in the IBM FSM. This bulletin addresses the issue. Vulnerability Details CVEID: CVE-2015-7236 DESCRIPTION: rpcbind is vulnerable to a denial of service, caused by a use-after-free in PMAPCALLIT. By sending specially...

Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple vulnerabilities from Apache HTTP server (CVE-2015-1283, CVE-2015-3183)

Summary Multiple security vulnerabilities have been discovered in the Apache HTTP server that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2015-1283 DESCRIPTION: Multiple integer overflows in the XMLGetBuffer function in Expat through...

Security Bulletin: IBM Platform Application Center Standard Edition is affected by a security vulnerability (CVE-2015-7450)

Summary A security vulnerability has been identified in the current levels of IBM Platform Application Center Standard Edition 9.1.4, 9.1.4.1 and 9.1.4.2 that could allow a remote attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache...

Security Bulletin: A security vulnerability has been identified in Tivoli Common Reporting shipped with IBM Systems Director Editions.(CVE-2015-7450)

Summary Tivoli Common Reporting is shipped as a component of IBM Systems Director Editions. Information about a security vulnerability affecting Tivoli Common Reporting has been published in a security bulletin. Vulnerability Details Please consult the security bulletins listed below for the...

Security Bulletin: Multiple Vulnerabilities in OpenSSL including Logjam affect IBM Flex System Manager (FSM)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by FSM. FSM has addressed the applicable CVEs. Vulnerability Details CVEID:...

Security Bulletin: Vulnerabilities in the GNU C Libraries (glibc) affect IBM Flex System Manager(FSM) (CVE-2013-2207, CVE-2014-8121, CVE-2015-1781)

Summary Multiple security vulnerabilities have been discovered in the GNU C Library glibc that is embedded in the IBM FSM. These vulnerabilities are addressed in this bulletin. Vulnerability Details CVEID: CVE-2013-2207 DESCRIPTION: The GNU C Library glibc could allow a local attacker to bypass...

Security Bulletin: Multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 1.5.0 and 1.7.0 affect IBM Flex System Manager (FSM)

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 1.5.0 and 1.7.0 that is used by IBM Flex System Manager. These issues were disclosed as part of the IBM Java SDK updates in April 2015. Vulnerability Details CVEID: CVE-2015-0488 DESCRIPTION: An...

Security Bulletin: A security vulnerability with openssh affects IBM Flex System Manager (CVE-2015-5600)

Summary A security vulnerability has been identified in openssh that is contained in the IBM Flex System Manager FSM. This bulletin addresses the vulnerability. Vulnerability Details CVEID: CVE-2015-5600 DESCRIPTION: OpenSSH could allow a local attacker to obtain sensitive information, caused by ...

Security Bulletin: Vulnerability in Libcrypt++ affects PowerKVM (CVE-2015-2141)

Summary PowerKVM is affected by a vulnerability in libcrypt++. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-2141 DESCRIPTION: libcrypt++ could allow a remote attacker to obtain sensitive information, caused by weak Rabin-Williams digital signature algorithm in...

Security Bulletin: Vulnerability in OpenSLP affects PowerKVM (CVE-2015-5177)

Summary PowerKVM is affected by a vulnerability in OpenSLP. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-5177 DESCRIPTION: OpenSLP is vulnerable to a denial of service, caused by a double free error in the SLPDProcessMessage function. A remote attacker could exploit this...

Security Bulletin: Vulnerability in lighttpd affects PowerKVM (CVE-2015-3200)

Summary PowerKVM is affected by a vulnerability in lighttpd CVE-2015-3200. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-3200 DESCRIPTION: lighttpd could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. An attacker could...

Security Bulletin: A security vulnerability with ntpd affects IBM Flex System Manager (CVE-2015-1799)

Summary A security vulnerability has been identified in ntpd that is used by IBM Flex System Manager FSM. This bulletin addresses this vulnerability. Vulnerability Details CVEID: CVE-2015-1799 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd is vulnerable to a denial of service,...

Security Bulletin:Vulnerabilities in wpa_supplicant may affect PowerKVM (CVE-2015-1863 and CVE-2015-4142)

Summary Vulnerabilities in wpasupplicant may affect PowerKVM CVE-2015-1863 and CVE-2015-4142. These vulnerability are now fixed. Note that although the code exists in PowerKVM, the functionality is not enabled or supported as shipped. Vulnerability Details CVEID: CVE-2015-1863 DESCRIPTION:...

Security Bulletin: A security vulnerability with net-snmp affects IBM Flex System Manager (CVE-2015-5621)

Summary A security vulnerability has been identified in net-snmp that is used by IBM Flex System Manager FSM. This bulletin addresses this vulnerability. Vulnerability Details CVEID: CVE-2015-5621 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by incompletely parsed varBind...

Security Bulletin: IBM Flex System Manager is affected by a vulnerability from FSM’s use of strongswan: (CVE-2015-4171)

Summary There is a security vulnerability in strongswan that is used by IBM Flex System Manager FSM. Vulnerability Details CVEID: CVE-2015-4171 DESCRIPTION: strongSwan could allow a remote authenticated attacker to obtain sensitive information, caused by an error in IKEv2 connections related to...

Security Bulletin: Vulnerabilities in libXfont affect PowerKVM (CVE-2015-1802, CVE-2015-1803, CVE-2015-1804)

Summary PowerKVM is affected by three vulnerabilities in libXfont. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-1802 DESCRIPTION: X.Org libXfont could allow a local attacker to gain elevated privileges on the system, caused by an error in bdfReadProperties in the...

Security Bulletin: Vulnerabilities in libuser affect PowerKVM (CVE-2015-3245 and CVE-2015-3246)

Summary PowerKVM is affected by two vulnerabilities CVE-2015-3245 and CVE-2015-3246 in libuser. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-3245 DESCRIPTION: libuser is vulnerable to a denial of service, caused by the failure to properly filter out newline character...