Security Bulletin: Vulnerabilities in Bash affect IBM Flex System FC3171 8Gb SAN Switch (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278).

Vulnerability Details Abstract Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as "Bash Bug" or "Shellshock" and two memory corruption vulnerabilities. Bash is used by IBM Flex System FC3171 8Gb SAN Switch. Content...

Security Bulletin: Vulnerabilities in Bash affect IBM Flex System FC5022 16Gb Fibre Channel SAN Switch (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Vulnerability Details Abstract Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as "Bash Bug" or "Shellshock" and two memory corruption vulnerabilities. Bash is used by IBM Flex System FC5022 16Gb Fibre Channel SAN...

Security Bulletin: Vulnerability in SSLv3 affects IBM Flex System 40Gb Ethernet/IB6131 40Gb Infiniband Switch Firmware (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Flex System 40Gb Ethernet/IB6131 40Gb Infiniband Switch Firmware. Vulnerability Details Abstract SSLv3 contains a vulnerability that has be...

Security Bulletin: Vulnerabilities in php5 affect IBM Flex System Manager (FSM): (CVE-2013-4248 CVE-2013-6420 CVE-2014-2497 CVE-2014-4049)

Summary A security vulnerability has been discovered in openssh that is included in IBM FSM. Vulnerability Details Abstract Security vulnerabilities have been discovered in php5 that is included in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2013-4248 DESCRIPTION: PHP could allow a remote...

Security Bulletin: Vulnerabilities in curl affect IBM Flex System Manager (FSM): (CVE-2013-2174 CVE-2013-4545 CVE-2014-0015 CVE-2014-0138 CVE-2014-013)

Summary Abstract Security vulnerabilities have been discovered in php5 that is included in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2013-2174 DESCRIPTION: cURL/libcURL is vulnerable to a heap-based buffer overflow, caused by improperb Vulnerability Details Abstract Security...

Security Bulletin: A vulnerability in openssh affects IBM Flex System Manager (FSM): (CVE-2014-2653)

Summary A security vulnerability has been discovered in openssh that is included in IBM FSM. Vulnerability Details Abstract A security vulnerability has been discovered in openssh that is included in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2013-2653 Description: OpenSSH could allow a...

Security Bulletin: Vulnerabilities in Bash affect IBM Flex System 40Gb Ethernet/IB6131 40Gb Infiniband Switch firmware (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Abstract Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as "Bash Bug" or "Shellshock" and two memory corruption vulnerabilities. Bash is used by IBM Flex System 40Gb Vulnerability Details Abstract Six Bash...

Security Bulletin: IBM Flex System Manager (FSM) is affected by vulnerability (CVE-2014-3466)

Summary IBM Flex System Manager FSM is affected by gnutls vulnerability CVE-2014-3466 which could be used to create a buffer overflow. Vulnerability Details Abstract IBM Flex System Manager FSM is affected by gnutls vulnerability CVE-2014-3466 which could be used to create a buffer overflow...

Security Bulletin: IBM Flex System Manager (FSM) is affected by OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-3470)

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Content Vulnerability...

Security Bulletin: IBM Flex System Manager (FSM) is affected by vulnerabilities stemming from FSM?s use of IBM DB2: (CVE-2012-2194, CVE-2012-2196, CVE-2012-2197, CVE-2012-4826, CVE-2013-4033, CVE-2013-5466)

Summary Security vulnerabilities have been discovered in versions of IBM DB2 that are embedded in IBM FSM. Vulnerability Details Abstract Security vulnerabilities have been discovered in versions of IBM DB2 that are embedded in IBM FSM. Content Vulnerability Details: CVE-ID: CVE-2012-2194...

Security Bulletin: IBM Flex System Manager (FSM) is affected by security vulnerabilities. (CVE-2013-5772, CVE-2013-5803, CVE-2013-5372, CVE-2013-5780, CVE-2013-5211)

Summary IBM Flex System Manager FSM is affected by security vulnerabilities. CVE-2013-5772, CVE-2013-5803, CVE-2013-5372, CVE-2013-5780, CVE-2013-5211 Vulnerability Details Abstract IBM Flex System Manager FSM is affected by security vulnerabilities. CVE-2013-5772, CVE-2013-5803, CVE-2013-5372,...

Security Bulletin: IBM Flex System Manager (FSM) is affected by vulnerability (CVE-2013-5211)

Summary IBM Flex System Manager FSM is affected by a ntp vulnerability that could result in a denial of service Vulnerability Details Abstract IBM Flex System Manager FSM is affected by a ntp vulnerability that could result in a denial of service Content Vulnerability Details: CVE-ID: CVE-2013-52...

Security Bulletin: IBM Flex System Manager (FSM) is affected by vulnerability (CVE-2013-5423)

Summary IBM Flex System Manager FSM is affected by a vulnerability that could allow for a user enumeration attack. Vulnerability Details Abstract IBM Flex System Manager FSM is affected by a vulnerability that could allow for a user enumeration attack. Content Vulnerability Details: CVE-ID:...

Security Bulletin: IBM Flex System Integrated Management Module II (IMM2) is affected by the following OpenSSL vulnerability: CVE-2014-0224

Summary An interface on the IBM BladeCenter Advanced Management Module AMM may expose user account names and passwords that have been configured on that AMM. Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL...

Security Bulletin: IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru Firmware are affected by the following OpenSSL vulnerabilities

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project Content Vulnerability Detail...

Security Bulletin: IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware is affected by the following OpenSSL vulnerabilities

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project Content Vulnerability Detail...

Security Bulletin: IBM Flex System Manager (FSM) and compatible IBM Systems Director agents are affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450, and CVE-2013-6449)

Summary An interface on the IBM BladeCenter Advanced Management Module AMM may expose user account names and passwords that have been configured on that AMM. Vulnerability Details Abstract The FSM and compatible agents contain a version of openssl that contained the 3 vulnerabilities listed above...

Security Bulletin: Vulnerabilities in cURL/libcURL affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru

Summary The following vulnerabilities in cURL/libcURL have been addressed by IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru. Vulnerability Details CVEID: CVE-2018-1000007 DESCRIPTION: cURL libcurl could allow a remote attacker to obtain sensitive information, caused by a flaw when passing ...

Security Bulletin: Flex System V7000 systems are affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerabilit...

Security Bulletin: Multiple vulnerabilities in unzip affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been identified in unzip that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9844 DESCRIPTION: Info-Zip UnZip is vulnerable to a denial of service, caused by buffer overflow in zishort function in...