Security Bulletin: Vulnerabilities in Firefox affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance

Summary Vulnerabilities have been found in Firefox that affect IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-1547, CVE-2014-1555, CVE-2014-1556, CVE-2014-1557. Vulnerability Details CVEID: CVE-2014-1547 DESCRIPTION: Mozilla Firefox and Thunderbird might allo...

Security Bulletin: SmartCloud Provisioning - Vulnerability in procmail

Summary A flaw has been discovered in procmail that affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-3618. Vulnerability Details CVE-ID: CVE-2014-3618 Description: procmail is vulnerable to a heap-based buffer overflow, caused by improper bounds checking wh...

Security Bulletin: Vulnerabilities in qemu-kvm affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance.

Summary Multiple vulnerabilities have been identified in qemu-kvm that affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance CVE-2014-0222, CVE-2014-0223. Vulnerability Details CVE-ID: CVE-2014-0222 DESCRIPTION: QEMU could allow a remote attacker to execute arbitrary code on the...

Security Bulletin: Vulnerabilities in GNU C Library affects IBM SmartCloud Provisioning for Software Virtual Appliance (CVE-2014-5119, CVE-2014-0475)

Summary Vulnerabilities have been identified in the GNU C Library glibc packages for the standard C and the standard math libraries on Linux systems, that affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance CVE-2014-5119, CVE-2014-0475. Vulnerability Details CVE-ID: CVE-2014-511...

Security Bulletin: Vulnerability in Gnu Transport Layer Security (GnuTLS) affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3466).

Summary Vulnerability in Gnu Transport Layer Security GnuTLS affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-3466. Vulnerability Details CVE ID: CVE-2014-3466 DESCRIPTION: The GnuTLS library provides support for cryptographic algorithms and for protoco...

Security Bulletin: Vulnerabilities in httpd affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance

Summary Vulnerabilities have been identified for httpd packages in Open Source Apache HTTP Server that affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance CVE-2014-0118, CVE-2014-0226, CVE-2014-0231. Vulnerability Details CVE-ID: CVE-2014-0118 DESCRIPTION: The deflateinfilter...

Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java™ Technology Edition affect IBM SmartCloud Provisioning (CVE-2014-0878, CVE-2014-0460, CVE-2014-0453).

Summary Multiple security vulnerabilities exist in IBM SDK, Java Technology Edition and affect IBM SmartCloud Provisioning CVE-2014-0878, CVE-2014-0460, CVE-2014-0453 . IBM SDK, Java Technology Edition has released patch updates with security vulnerabilities fixes. IBM SDK, Java Technology Editio...

Security Bulletin: Vulnerabilities in tomcat affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance (CVE-2013-4590, CVE-2014-0119)

Summary Vulnerabilities in tomcat6 packages affect IBM SmartCloud Provisioning 2.1 for Provided Software Virtual Appliance CVE-2013-4590, CVE-2014-0119. Vulnerability Details CVEID: CVE-2013-4590 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a...

Security Bulletin: Vulnerabilities in Bash affect SmartCloud Provisioning for IBM Provided Software Virtual Appliance

Summary Vulnerabilities in Bash affect SmartCloud Provisioning for IBM Provided Software Virtual Appliance CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187. Vulnerability Details Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that...

Security Bulletin: SmartCloud Provisioning - Webmin Open Source vulnerability (CVE-2014-0339)

Summary SmartCloud Provisioning - Webmin Open Source vulnerability as per X-Force Report, March 2014 CVE-2014-0339. Vulnerability Details SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance is shipped with Webmin. A security vulnerability has been discovered in Webmin that...

Security Bulletin: Security vulnerabilities in IBM SDK, Java™ Technology Edition (CVE-2014-0878, CVE-2014-0460, CVE-2014-0453, CVE-2014-2420) affect SmartCloud Provisioning

Summary Multiple security vulnerabilities exist in the IBM SDK, Java™ Technology Edition shipped with IBM SmartCloud Provisioning CVE-2014-0878, CVE-2014-0460, CVE-2014-0453, CVE-2014-2420. IBM SDK, Java™ Technology Edition has released patch updates with security vulnerabilities fixes. SmartClou...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning.

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470, CVE-2014-0076. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: OpenSSL is...

Security Bulletin: SmartCloud Provisioning is affected by a vulnerability in OpenSSL (CVE-2014-0160)

Summary A security vulnerability has been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerability...

CVE-2013-5455

IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems.delete command...

Arbitrary file deletion

IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems.delete command...

CVE-2013-5455

IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems.delete command...