CVE-2013-4035

CVE-2013-4035 affects IBM Sterling Connect:Direct for OpenVMS (versions 3.4.00, 3.4.01, 3.5.00, 3.6.0, 3.6.0.1). When the server is in a TCP/IP session and the client requests an unencrypted session, the product may allow an unencrypted session to proceed even if SSL is configured, exposing data....

CVE-2012-6352

IBM Sterling Connect:Direct for UNIX is affected by CVE-2012-6352. The Session Manager can be crashed by specially crafted network data, causing DoS and disk/log surge. AFFECTED: all versions prior to 4.1.0.2_iFix012. REMEDIATION: upgrade and apply fixes per version—4.1.0: iFix QC20158 or later; ...

CVE-2013-2989

IBM Sterling Connect:Direct for UNIX on AIX 6.1 and above is affected by CVE-2013-2989. The file-copying functionality can execute with elevated file-system privileges when a user is authenticated, allowing bypass of read and write permissions. Affected versions include 3.8.00, 4.0.00, and 4.1.0....