Security Bulletin: A vulnerability in the GSKit component of IBM Rational ClearCase (CVE-2016-0201)

Summary A vulnerability has been addressed in the GSKit component of IBM Rational ClearCase. Vulnerability Details CVEID: CVE-2016-0201 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by an MD5 collision. An attacker could exploit this vulnerability to...

Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2018-1000005, CVE-2018-1000007)

Summary IBM Rational ClearCase is affected by cURL/libcURL vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000007 DESCRIPTION: cURL liburl could allow a remote attacker to obtain sensitive information, caused by a flaw when passing on custom Authorization: headers. By sending a...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Rational ClearCase (CVE-2017-10115, CVE-2017-10116)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 6, 7, and 8, which are used by IBM Rational ClearCase. These issues were disclosed as part of the IBM Java SDK updates in July 2017. Vulnerability Details CVEID: CVE-2017-10115 DESCRIPTION: An unspecified...

Security Bulletin: Vulnerability in IBM Rational ClearCase (GSKit component) with potential for TLS Attack (CVE-2013-0169)

Summary The IBM GSKit component used in Rational ClearCase is susceptible to a Transport Layer Security protocol used in HTTPS vulnerability known as "Lucky Thirteen." The vulnerability might allow remote attackers to conduct distinguishing and plain-text recovery attacks by statistically analyzi...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Rational ClearCase (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM Rational ClearCase. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this...

Security Bulletin: XML entity expansion vulnerabilities in ClearCase (CVE-2014-3090)

Summary IBM Rational ClearCase is vulnerable to XML entity expansion attacks. These attacks could cause a denial of service. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login wit...

Security Bulletin: Vulnerability in OpenSSL affects IBM Rational ClearCase (CVE-2016-2107)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Rational ClearCase. IBM Rational ClearCase has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to obtain...

Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2016-8624, CVE-2016-8625)

Summary IBM Rational ClearCase is affected by cURL/libcURL access restriction bypass and network host spoofing vulnerabilities. Vulnerability Details CVEID: CVE-2016-8624 DESCRIPTION: cURL/libcurl could allow a remote attacker to bypass security restrictions, caused by the failure to parse the...

Security Bulletin: SSL timing vulnerabilities in ClearCase Remote Client (CVE-2014-0411)

Summary An attacker can monitor a long-lived encrypted CCRC session and potentially decrypt the entire session. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID...

Security Bulletin: Vulnerability in IBM Rational ClearCase (Java component) with potential for TLS Attack (CVE-2013-0169)

Summary IBM Rational ClearCase includes an IBM Java SDK that is based on the Oracle JDK. Oracle has released April 2013 critical patch updates CPU which contain security vulnerability fixes and the IBM Java SDK has been updated to incorporate those updates. Vulnerability Details | Subscribe to My...

Description of the security update for the Windows FTP Server denial of service vulnerability in Windows Server 2008: July 10, 2018

Description of the security update for the Windows FTP Server denial of service vulnerability in Windows Server 2008: July 10, 2018 Summary A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol FTP connections. To learn more about the vulnerability, go to...

Description of the security update for SharePoint Server 2016: July 10, 2018

None None...

Description of the security update for the Win32k elevation of privilege vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: July 10, 2018

None None...

Description of the security update for the Windows denial of service vulnerability in Windows Server 2008: July 10, 2018

Description of the security update for the Windows denial of service vulnerability in Windows Server 2008: July 10, 2018 Summary A denial of service vulnerability exists when Windows improperly handles objects in memory. To learn more about the vulnerabilities, go to the following Common...

Improvements and fixes - Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1

Improvements and fixes - Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error...

Improvements and fixes for Windows Server 2008 Service Pack 2

Improvements and fixes for Windows Server 2008 Service Pack 2 Summary This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue in which some devices may experience stop error 0xD1 when you run network...

Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 (KB 4338601)

Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 KB 4338601 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability exists when .NET Framework does not validate input correctly. An attacker who successful...

Description of the Security and Quality Rollup updates for .NET Framework 3.5 for Windows Server 2012 (KB 4338421)

Description of the Security and Quality Rollup updates for .NET Framework 3.5 for Windows Server 2012 KB 4338421 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability...

Description of the security update for SharePoint Foundation 2013: July 10, 2018

Description of the security update for SharePoint Foundation 2013: July 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...

Description of the security update for the remote code execution vulnerability in Visual Studio 2010 Service Pack 1: July 10, 2018

Description of the security update for the remote code execution vulnerability in Visual Studio 2010 Service Pack 1: July 10, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary A remote code execution...