IBM i Access For Windows 7.1 Denial Of Service

Vendor:
==============
www.ibm.com

Product:
====================================================
IBM i Access for Windows
Release 7.1 of IBM i Access for Windows is affected

Vulnerability Type:
========================
Stack Buffer Overflow DOS

CVE Reference:
==============
CVE-2015-7422

Vulnerability Details:
=====================
IBM i Access for Windows vulnerable to a buffer overflow, caused by
improper bounds checking.
A local attacker could overflow a buffer and cause the program to crash.


Remediation/Fixes
The issue can be fixed by obtaining and applying the Service Pack SI57907.

The buffer overflow vulnerability can be remediated by applying Service
Pack SI57907.

The Service Pack is available at:
http://www-03.ibm.com/systems/power/software/i/access/windows_sp.html

Workarounds and Mitigations
None known

CVSS Base Score: 4
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/107770 for the current
score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)



Description:
======================================================================
Request Method(s):          [+] local
Vulnerable Product:         [+] IBM i Access for Windows Release 7.1
Affected Area(s):           [+] IBMI i Access

#  0day.today [2017-12-31]  #