VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC ] 



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML ] 
CVE-2010-1612
websphere_datapower_xml_accelerator_xa35, websphere_datapower_xml_security_gatewa...: The IBM WebSphere DataPower XML Accelerator XA35, L...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1612

Original

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-04-29
Source Information Category:
Advisory, Alert
Last Updated:
2010-04-30




Affected Product Tags
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.1
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.10 and previous versions
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.2
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.3
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.4
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.5
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.6
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.7
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.8
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.9
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.0
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.1
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.2
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.3
cpe:/h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.4
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.2
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.1
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.10 and previous versions
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.2
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.3
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.4
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.5
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.6
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.7
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.8
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.9
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.0
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.1
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.2
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.4
cpe:/h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.03
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.1
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.10 and previous versions
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.2
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.3
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.4
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.5
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.6
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.7
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.8
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.9
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.0
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.1
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.2
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.3
cpe:/h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.4
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.2
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.1
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.10 and previous versions
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.2
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.3
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.4
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.5
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.6
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.7
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.8
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.9
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.0
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.1
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.2
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.3
cpe:/h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.4
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.2
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.1
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.10 and previous versions
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.2
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.3
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.4
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.5
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.6
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.7
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.8
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.9
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.0
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.1
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.2
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.3
cpe:/h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.4
cpe:/h:qlogic:ethernet
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]
[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]
[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]
[Confidentiality Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]
[Integrity Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]
[Availability Impact]  [?]
Undefined [?]

None [?]
X Partial [?]
Complete [?]
Alternatives




References
AIXAPAR IC61364




BID 37952




BUGTRAQ 20100126 [IBM Datapower XS40] Denial of Service




CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg24024774




CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg24024773




CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg24024772




CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg24024771




CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg24024770




Vulnerability Type Other (NVD-CWE-Other)




Copyright © 2010 JPCERT/CC All Rights Reserved.