Security Bulletin: IBM Sterling Control Center has various vulnerabilities (CVE-2013-2968 and CVE-2013-2969)

Abstract IBM Sterling Control Center has various Denial-of-Service DOS and Cross Site Scripting XSS vulnerabilities. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-2968 DESCRIPTION: - Denial of Service IBM Sterling Control Center SCC uses a buffer read method which can potentially result in a...

CVE-2013-2968

IBM Sterling Control Center (SCC) is affected by CVE-2013-2968 due to a buffer-read flaw in a component used when reading large files without end-of-line characters. Affected SCC versions are 5.2 (up to 5.2.0.8), 5.3 (up to 5.3.0.3), and 5.4 (up to 5.4.0.1). The issue can allow remote authenticat...