EUVD-2015-4959

Malware in sbrugna...

Security Bulletin: IBM Sterling Control Center is vulnerable to remote attack on MQXR service due to IBM WebSphere MQ (CVE-2015-4943)

Summary IBM WebSphere MQ is used by IBM Sterling Control Center. IBM WebSphere MQ could allow a remote attacker to crash the MQXR service, and the issue has been addressed. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR...

Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4943, CVE-2015-4941, CVE-2015-4942)

Summary A number of malformed MQTT client flows could be issued by a malicious user to cause the MQXR service to abend and require manual restart. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service using a sequence of...

CVE-2015-4943

CVE-2015-4943 affects IBM WebSphere MQ Light 1.x before 1.0.2. A remote attacker can crash the MQXR service by issuing a sequence of connect/disconnect actions; IBM’s bulletin for MQ Light notes the vulnerability and lists affected versions (1.0 and 1.0.1) with a base CVSS of 5. Remediation is to...