Security Bulletin: Vulnerabilities in binutils affect IBM Chassis Management Module (CMM) (CVE-2014-8501 CVE-2014-8502 CVE-2014-8503)

Summary Multiple vulnerabilities in binutils affect IBM Chassis Management Module CMM. Vulnerability Details Summary Multiple vulnerabilities in binutils affect IBM Chassis Management Module CMM. Vulnerability Details: CVE-ID: CVE-2014-8501 Description: GNU Binutils is vulnerable to a denial of...

Security Bulletin: Multiple vulnerabilities in GNU C Library (glibc), OpenSSL and NTP affect IBM Flex System Chassis Management Module (CMM)

Summary Vulnerabilities in GNU C Library glibc, OpenSSL and NTP affect IBM Flex System Chassis Management Module. IBM Flex System Chassis Management Module has addressed the CVEs listed below. Vulnerability Details Summary Vulnerabilities in GNU C Library glibc, OpenSSL and NTP affect IBM Flex...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by glibc vulnerabilities (CVE-2015-1472, CVE-2013-7423, CVE-2014-7817, and CVE-2014-9402)

Summary Security vulnerabilities in glibc affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details Summary Security vulnerabilities in glibc affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details: CVE-ID: CVE-2013-7423 Description: GNU glibc could allow a...

Security Bulletin: Multiple vulnerabilities in Open SSL, OpenSSH and curl affect the Integrated Management Module II (IMM2)

Summary OpenSSL vulnerabilities were disclosed in August 2014. This bulletin also addresses curl vulnerabilities disclosed in July 2014, and OpenSSH vulnerabilities that were disclosed in April 2014. Vulnerability Details Summary OpenSSL vulnerabilities were disclosed in August 2014. This bulleti...

Security Bulletin: Vulnerability in SSLv3 affects IBM Chassis Management Module (CMM) (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Chassis Management Module CMM. Vulnerability Details Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle...

Security Bulletin: Vulnerabilities in curl affect IBM Chassis Management Module (CMM) (CVE-2013-4545, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139, CVE-2013-2174)

Summary Multiple vulnerabilities in curl affect IBM Chassis Management Module CMM. Vulnerability Details Summary Multiple vulnerabilities in curl affect IBM Chassis Management Module CMM. Vulnerability Details CVE-ID: CVE-2013-4545 Description: cURL/libcURL could allow a remote attacker to conduc...

Security Bulletin: Vulnerabilities in PHP affect IBM Chassis Management Module (CMM) (CVE-2013-4248, CVE-2013-6420, CVE-2014-2497, CVE-2014-4049)

Summary Multiple vulnerabilities in PHP affect IBM Chassis Management Module CMM. Vulnerability Details Summary Multiple vulnerabilities in PHP affect IBM Chassis Management Module CMM. Vulnerability Details: CVE-ID: CVE-2013-4248 Description: PHP could allow a remote attacker to conduct spoofing...

Security Bulletin: Vulnerabilities in OpenSSL affects IBM Chassis Management Module (CMM) (CVE-2014-3567)

Summary OpenSSL vulnerabilities along with SSL 3 Fallback protection TLSFALLBACKSCSV were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by IBM Chassis Management Module. IBM Chassis Management Module has addressed the applicable CVEsand included the SSL 3.0 Fallback...

Security Bulletin: Vulnerabilities in OpenSSL affect System x Integrated Management Module (IMM) (CVE-2015-0204, CVE-2014-3570, CVE-2014-3572, CVE-2014-8275)

Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. This includes "FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. OpenSSL is used by System x Integrated Management Module IMM. IMM has addressed the applicable CVEs...

Security Bulletin: Vulnerability in RC4 stream cipher affects Integrated Management Module 2 (IMM2) (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects Integrated Management Module 2 IMM2. Vulnerability Details Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects Integrated Management Module 2 IMM2. Vulnerability Details CVE-ID: CVE-2015-2808 Description: The RC4 algorithm, as used in...

Security Bulletin: Vulnerabilities in OpenSSL affect System x Integrated Management Module (IMM) (CVE-2015-0204)

Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. This includes "FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. OpenSSL is used by System x Integrated Management Module IMM. IMM hasaddressed the applicable CVEs...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by libxml2 vulnerabilities (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details: CVE-ID: CVE-2014-0191 Description: Libxml2 is vulnerable to a denial...

Security Bulletin: Multiple potential vulnerabilities in OpenSSL fixed in Chassis Management Module (CMM) (CVE-2014-3509, CVE-2014-3506, CVE-2014-3507, CVE-2014-3511, CVE-2014-3505, CVE-2014-3510, CVE-2014-3508)

Summary OpenSSL disclosed several vulnerabilities in August 2014. Seven of those vulnerabilities apply to the version of OpenSSL used by Flex Systems Chassis Management Module CMM. Vulnerability Details Abstract OpenSSL disclosed several vulnerabilities in August 2014. Seven of those...

Security Bulletin: Vulnerability in SSLv3 affects Chassis Management Module (CMM) (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in Chassis Management Module CMM. Vulnerability Details Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On...

Security Bulletin: The IBM Chassis Management Module (CMM) is affected by a vulnerability in NTP server (CVE-2013-5211)

Summary A security vulnerability has been discovered in the Chassis Management Module NTP Server. Vulnerability Details Abstract A security vulnerability has been discovered in the Chassis Management Module NTP Server. Content Vulnerability Details: CVE-ID: CVE-2013-5211 Description: The monlist...

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by the following OpenSSL vulnerability: CVE-2014-0224

Summary An interface on the IBM BladeCenter Advanced Management Module AMM may expose user account names and passwords that have been configured on that AMM. Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL...

Security Bulletin: IBM System x and Flex Systems OpenSSH Vulnerabilities (CVE-2012-0814, CVE-2008-5161)

Summary Older versions of OpenSSH, used by several System x and Flex Systems products, contain multiple vulnerabilities. Vulnerability Details Abstract Older versions of OpenSSH, used by several System x and Flex Systems products, contain multiple vulnerabilities. Content Vulnerability Details:...

Buffer overflow

In System Management Module SMM versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows...

CVE-2018-16095

In System Management Module SMM versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails...

CVE-2018-16094

In System Management Module SMM versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow...