IBM Sterling Connect:Direct Unix qdir Stack Overflow DoS Vulnerability (CVE-2020-35888)

Vulnerability Overview Vulnerability ID: CVE-2020-35888 Description: The utility in IBM Sterling Connect:Direct for Unix contains a vulnerability that could lead to a Denial of Service (DoS). An attacker could exploit this vulnerability by sending crafted requests to the utility to trigger a stack overflow. CVSS Score: 5.5 (Medium) CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Scope of Impact Affected Products: - IBM Sterling Connect:Direct for Unix - Versions: 6.4.0.0 to 6.4.0.4 - Versions: 6.4.0.5 to 6.4.0.7 Remediation Recommended Action: IBM recommends that customers apply the following fix to address this vulnerability: - Versions 6.4.0.0 to 6.4.0.4: Apply 6.4.0.5 FP4555 - Versions 6.4.0.5 to 6.4.0.7: Apply 6.4.0.7 FP4555 Additional Information Release Date: October 12, 2020 Last Updated: October 12, 2020 Document ID: 2192122 Related Resources Reference Links: - Common Vulnerabilities and Exposures (CVE) - IBM Security Bulletin Disclaimer The information in this document is based on information available to IBM at the time of publication. IBM does not guarantee the accuracy or completeness of the information and is not liable for any direct or indirect damages resulting from the use of this document. Change History October 12, 2020: Initial Release Note The information in this document may contain forward-looking statements regarding future events or results. IBM does not guarantee the accuracy of these statements and assumes no responsibility for updating them. Contact Information For further support, please visit IBM Support or contact your IBM representative. Legal Terms Use of this document implies your agreement to IBM's terms and conditions of use. Copyright Information © IBM Corporation 2020 Technical Support For technical support, please visit IBM Support or call the IBM support hotline. Document Version Version 1.0 Document Status Published Document Type Security Advisory Document Language English Document Format HTML Document Size Unknown Document Download None Document Sharing None Document Printing None Document Search None Document Comments None Document Feedback None Document Rating None Document Tags Security, Vulnerability, IBM, Sterling Connect:Direct, Unix, qdir, DoS, CVE-2020-35888 Document Category Security Advisory Document Series IBM Security Bulletins Document Series ID 2192122 Document Series Name IBM Sterling Connect:Direct for Unix Security Bulletin Document Series Description This series of documents provides security advisories and fix information for IBM Sterling Connect:Direct for Unix. Document Series Link IBM Security Bulletins Document Series Updates Periodic updates Document Series Subscription None Document Series Notifications None Document Series Archive None Document Series History None Document Series Version None Document Series Status None Document Series Type None Document Series Language None Document Series Format None Document Series Size None Document Series Download None Document Series Sharing None Document Series Printing None Document Series Search None Document Series Comments None Document Series Feedback None Document Series Rating None Document Series Tags None Document Series Category None Document Series Series ID None Document Series Series Name None Document Series Series Description None Document Series Series Link None Document Series Series Updates None Document Series Series Subscription None Document Series Series Notifications None Document Series Series Archive None Document Series Series History None Document Series Series Version None Document Series Series Status None Document Series Series Type None Document Series Series Language None Document Series Series Format None Document Series Series Size None Document Series Series Download None Document Series Series Sharing None Document Series Series Printing None Document Series Series Search None Document Series Series Comments None Document Series Series Feedback None Document Series Series Rating None Document Series Series Tags None Document Series Series Category None Document Series Series Series ID None Document Series Series Series Name None Document Series Series Series Description None Document Series Series Series Link None Document Series Series Series Updates None Document Series Series Series Subscription None Document Series Series Series Notifications None Document Series Series Series Archive None Document Series Series Series History None Document Series Series Series Version None Document Series Series Series Status None Document Series Series Series Type None Document Series Series Series Language None Document Series Series Series Format None Document Series Series Series Size None Document Series Series Series Download None Document Series Series Series Sharing None Document Series Series Series Printing None Document Series Series Series Search None Document Series Series Series Comments None Document Series Series Series Feedback None Document Series S

Goal Reached Thanks to every supporter — we hit 100%!

IBM Sterling Connect:Direct Unix qdir Stack Overflow DoS Vulnerability (CVE-2020-35888)

More from this source