Technical Description

Two vulnerabilities have been identified in IBM Tivoli Provisioning Manager for OS Deployment, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. These issues are due to invalid memory access and memory corruption errors when processing malformed HTTP (port 8080) or HTTPS (port 443) requests, which could be exploited by remote unauthenticated attackers to crash an affected application or execute arbitrary code with elevated privileges.

Affected Products

IBM Tivoli Provisioning Manager for OS Deployment version 5.1.0.1 and prior

Solution

Upgrade to Tivoli Provisioning Manager for OS Deployment Fix Pack 2 (version 5.1.0.2) :
http://www-1.ibm.com/support/docview.wss?uid=swg24015347

References

http://www.vupen.com/english/advisories/2007/1199
http://www-1.ibm.com/support/docview.wss?uid=swg24015347
http://www-1.ibm.com/support/docview.wss?uid=swg24015664
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=498

Credits

Vulnerabilities reported by iDefense Labs and Aaron Portnoy (TippingPoint Security Research Team).

ChangeLog

2007-04-03 : Initial release
2007-05-04 : Updated References

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.