Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manager (FSM): (CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670)

Summary Summary: There are multiple vulnerabilities in php that is used by IBM Flex System Manager. Vulnerability Details CVE-ID: CVE-2014-3668 DESCRIPTION: PHP is vulnerable to a buffer overflow, caused by improper bounds checking by the mkgmtime Vulnerability Details Abstract There are multiple...

Security Bulletin: Vulnerabilities in dbus affect the IBM Flex System Manager (FSM) (CVE-2014-3638, CVE-2014-3639, CVE-2014-3477)

Summary Vulnerabilities in dbus affect the IBM Flex System Manager FSM CVE-2014-3638, CVE-2014-3639, CVE-2014-3477 Vulnerability Details Abstract Vulnerabilities in dbus affect the IBM Flex System Manager FSM CVE-2014-3638, CVE-2014-3639, CVE-2014-3477 Content Vulnerability Details: CVE-ID:...

Security Bulletin: IBM Flex System Manager (FSM) is affected by a security vulnerability: (CVE-2014-6147)

Summary A security vulnerability has been discovered in the IBM FSM. Vulnerability Details Abstract A security vulnerability has been discovered in the IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2014-6147 Description: An authenticated user could obtain sensitive data from the FSM and use...

Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manager (FSM): (CVE-2014-3597, CVE-2014-4721 and CVE-2014-5459)

Summary There are multiple vulnerabilities in php that is used by IBM Flex System Manager. Vulnerability Details Abstract There are multiple vulnerabilities in php that is used by IBM Flex System Manager. Content Vulnerability Details: CVE-ID: CVE-2014-3597 Description: PHP is vulnerable to a...

Security Bulletin: A vulnerability in binutils affects IBM Flex System Manager (FSM): (CVE-2014-8501, CVE-2014-8502, CVE-2014-8503)

Summary Vulnerabilities have been found in libxml2 that is used by IBM Flex System Manager. Vulnerability Details Abstract Vulnerabilities have been found in libxml2 that is used by IBM Flex System Manager. Content Vulnerability Details: CVE-ID: CVE-2014-8501 Description: GNU Binutils is vulnerab...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System Networking Switches (CVE-2014-3570, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204)

Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. This includes "FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. OpenSSL is used by IBM Flex System Networking Switches. The IBM Flex System Networking Switches listed belo...

Security Bulletin: Vulnerabilities in rpm affect IBM Flex System Manager (FSM): (CVE-2013-6435, CVE-2014-8118)

Summary Vulnerabilities have been found in the rpm package included in IBM Flex System Manager FSM. Vulnerability Details Abstract Vulnerabilities have been found in the rpm package included in IBM Flex System Manager FSM. Content Vulnerability Details: CVE-ID: CVE-2013-6435 Description: RPM...

Security Bulletin: IBM Flex System Manager (FSM) is affected by security vulnerability CVE-2014-3099

Summary IBM Flex System Manager FSM is affected by security vulnerability CVE-2014-3099 Vulnerability Details Abstract IBM Flex System Manager FSM is affected by security vulnerability CVE-2014-3099 Content Vulnerability Details: CVE-ID: CVE-2014-3099 Description: The FSM allows an attacker with...

Security Bulletin: Vulnerabilities in Apache affect the IBM Flex System Manager (FSM): (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)

Summary Vulnerabilities in Apache affect the IBM Flex System Manager FSM: CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231 Vulnerability Details Abstract Vulnerabilities in Apache affect the IBM Flex System Manager FSM: CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231 Content...

Security Bulletin: Vulnerabilities in glibc affect the IBM Flex System Manager (FSM): (CVE-2013-4332, CVE-2014-0475, CVE-2014-5119)

Summary Vulnerabilities in glibc affect the IBM Flex System Manager FSM: CVE-2013-4332, CVE-2014-0475, CVE-2014-5119 Vulnerability Details Abstract Vulnerabilities in glibc affect the IBM Flex System Manager FSM: CVE-2013-4332, CVE-2014-0475, CVE-2014-5119 Content Vulnerability Details: CVE-ID:...

Security Bulletin: Vulnerabilities in Bash affect IBM Flex System FC5022 16Gb Fibre Channel SAN Switch (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Vulnerability Details Abstract Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as "Bash Bug" or "Shellshock" and two memory corruption vulnerabilities. Bash is used by IBM Flex System FC5022 16Gb Fibre Channel SAN...

Security Bulletin: Vulnerabilities in Bash affect IBM Flex System FC3171 8Gb SAN Switch (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278).

Vulnerability Details Abstract Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as "Bash Bug" or "Shellshock" and two memory corruption vulnerabilities. Bash is used by IBM Flex System FC3171 8Gb SAN Switch. Content...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex System Manager (FSM): (CVE-2014-0453, CVE-2014-0460 and CVE-2014-0878)

Vulnerability Details Abstract There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 1.6.0 and 1.7.0 and Oracle® Java™ SE Runtime Environment, Versions 1.6.0 and 1.7.0 that is used by IBM Flex System Manager. These were disclosed as part of the IBM Java...

Security Bulletin: Multiple potential vulnerabilities in OpenSSL fixed in Chassis Management Module (CMM) (CVE-2014-3509, CVE-2014-3506, CVE-2014-3507, CVE-2014-3511, CVE-2014-3505, CVE-2014-3510, CVE-2014-3508)

Summary OpenSSL disclosed several vulnerabilities in August 2014. Seven of those vulnerabilities apply to the version of OpenSSL used by Flex Systems Chassis Management Module CMM. Vulnerability Details Abstract OpenSSL disclosed several vulnerabilities in August 2014. Seven of those...

Security Bulletin: Vulnerabilities in php5 affect IBM Flex System Manager (FSM): (CVE-2013-4248 CVE-2013-6420 CVE-2014-2497 CVE-2014-4049)

Summary A security vulnerability has been discovered in openssh that is included in IBM FSM. Vulnerability Details Abstract Security vulnerabilities have been discovered in php5 that is included in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2013-4248 DESCRIPTION: PHP could allow a remote...

Security Bulletin: Vulnerability in SSLv3 affects IBM Flex System 40Gb Ethernet/IB6131 40Gb Infiniband Switch Firmware (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Flex System 40Gb Ethernet/IB6131 40Gb Infiniband Switch Firmware. Vulnerability Details Abstract SSLv3 contains a vulnerability that has be...

Security Bulletin: A vulnerability in openssh affects IBM Flex System Manager (FSM): (CVE-2014-2653)

Summary A security vulnerability has been discovered in openssh that is included in IBM FSM. Vulnerability Details Abstract A security vulnerability has been discovered in openssh that is included in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2013-2653 Description: OpenSSH could allow a...

Security Bulletin: Vulnerabilities in Bash affect IBM Flex System 40Gb Ethernet/IB6131 40Gb Infiniband Switch firmware (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Abstract Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as "Bash Bug" or "Shellshock" and two memory corruption vulnerabilities. Bash is used by IBM Flex System 40Gb Vulnerability Details Abstract Six Bash...

Security Bulletin: Vulnerabilities in curl affect IBM Flex System Manager (FSM): (CVE-2013-2174 CVE-2013-4545 CVE-2014-0015 CVE-2014-0138 CVE-2014-013)

Summary Abstract Security vulnerabilities have been discovered in php5 that is included in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2013-2174 DESCRIPTION: cURL/libcURL is vulnerable to a heap-based buffer overflow, caused by improperb Vulnerability Details Abstract Security...

Security Bulletin: IBM Flex System Manager (FSM) is affected by vulnerability (CVE-2014-3466)

Summary IBM Flex System Manager FSM is affected by gnutls vulnerability CVE-2014-3466 which could be used to create a buffer overflow. Vulnerability Details Abstract IBM Flex System Manager FSM is affected by gnutls vulnerability CVE-2014-3466 which could be used to create a buffer overflow...