Security Bulletin: GNU C library (glibc) vulnerability affects IBM XIV Storage System Gen3 (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects IBM XIV Storage System Gen3. Vulnerability Details CVEID: CVE-2015-0235 The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By sending a specially crafted, but valid hostna...

PT-2013-1722

Name of the Vulnerable Software and Affected Versions IBM XIV Storage System Gen3 versions prior to 11.2 Description The issue relies on a default X.509 v3 certificate for authentication, allowing man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust...

CVE-2012-4829: Undefined Security Weakness

IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust relationship...

PT-2012-3850

Name of the Vulnerable Software and Affected Versions IBM XIV Storage System Gen3 versions prior to 11.1.0.a Description The issue allows remote attackers to cause a denial of service, resulting in a device outage. This can be achieved by sending TCP packets to unspecified ports. Recommendations...

CVE-2012-2167: Undefined Security Weakness

The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service device outage via TCP packets to unspecified ports...