JVNDB-2011-000018

IBM Lotus vulnerable to denial-of-service (DoS)

IBM Lotus product line contains a denial-of-service (DoS) vulnerability.

IBM Lotus product line contains a denial-of-service (DoS) vulnerability due to an issue in Java Runtime Environment (JRE).

IBM Corporation

• IBM Forms 4.0, 3.5
• IBM Lotus Expeditor 6.2
• IBM Lotus Quickr for WebSphere Portal 8.5, 8.1, 8.0
• IBM Mashup Center 3.0, 2.0, 1.1, 1.0
• IBM WebSphere Dashboard Framework 6.1, 6.0
• Lotus ActiveInsight 6.1, 6.0
• Lotus Connections 3.0, 2.5, 2.0, 1.0
• Lotus Mashups 3.0, 2.0, 1.1, 1.0
• Lotus Sametime Advanced 8.0
• Lotus Sametime Standard 8.5
• Lotus Sametime Unified Telephony 8.5.1, 8.0
• Lotus Web Content Management 7.0, 6.1
• Lotus Workforce Management 6.1
• WebSphere Portlet Factory 7.0, 6.1
• Workplace Web Content Management 6.0

Hewlett-Packard Development Company,L.P

• HP Systems Insight Manager prior to v7.0

A remote attacker may cause a denial-of-service (DoS).

[Apply a patch]
Apply the appropriate patch according to the information provided by the developer.

IBM Corporation

• IBM Support Document : 1462146
• IBM Support Document : 1462136

Hewlett-Packard Development Company,L.P

• HP Security Bulletin : HPSBMU02769 SSRT100846

NEC Corporation

• NEC Security Information : NV18-002 (in Japanese)

1. Numeric Errors(CWE-189) [IPA Evaluation]

1. CVE-2010-4476

1. JVN : JVN#97334690
2. JVN Status Tracking Notes : JVNTR-2011-02
3. National Vulnerability Database (NVD) : CVE-2010-4476
4. Secunia Advisory : SA43295
5. SecurityTracker : 1025062

• [2011/03/04]
    Web page published
  [2013/03/26]
    Affected Products : Product was added (HPSBMU02769 SSRT100846)
    Vendor Information : Content was added (HPSBMU02769 SSRT100846)
  [2018/02/07]
    Vendor Information : Content was added