IBM WebSphere MQ client connection buffer overflow
| websphere-mq-clientconnection-bo (50641) |  Medium Risk |
Description:
The WebSphere MQ queue manager is vulnerable to a buffer overflow, caused by improper bounds checking when handling certain client requests. By sending a specially-crafted request via the WebSphere MQ client, a remote attacker could trigger a buffer overflow and execute arbitrary code on the system with elevated privileges or cause the application to crash.
Note: This vulnerability can not be exploited on queue managers secured with security exits or authentication through SSL, unless an attacker has valid authentication credentials or a valid SSL certificate.
IBM acknowledges the assistance of MWR InfoSecurity Limited for the reporting and diagnosis of this problem.IBM3
Consequences:
Gain Access
Remedy:
For WebSphere MQ 6.0:
Apply the latest Fix Pack (6.0.2.7 or later), APAR IZ50784, or APAR PK87106. See References.
For WebSphere MQ 7.0:
Apply the latest Fix Pack (7.0.1.0 or later), APAR IZ50784, or APAR PK87106. See References.
References:
- IBM Support & downloads: Interim fix for Security Vulnerability APAR IZ50784.
- BID-35170: IBM WebSphere MQ Remote Buffer Overflow Vulnerability
- CVE-2009-0896: Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request.
- SA35303: IBM WebSphere MQ Buffer Overflow Vulnerability
- SECTRACK ID: 1022311: IBM WebSphere MQ Buffer Overflow Lets Remote Users Execute Arbitrary Code
- VUPEN/ADV-2009-1463: IBM WebSphere MQ Data Handling Buffer Overflow Vulnerability
Platforms Affected:
- IBM WebSphere MQ 6.0
- IBM WebSphere MQ 7.0
Reported:
May 20, 2009
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net