TITLE: IBM WebSphere Application Server for z/OS Double-Free Vulnerability SECUNIA ADVISORY ID: SA17658 VERIFY ADVISORY: http://secunia.com/advisories/17658/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: >From remote SOFTWARE: IBM WebSphere Application Server 5.x http://secunia.com/product/2614/ DESCRIPTION: A vulnerability has been reported in WebSphere Application Server for z/OS, which has an unknown impact. The vulnerability is caused due to a double-free error in the BBOORB module. This can cause a heap corruption and may cause the service to crash. The vulnerability has been reported in version 5.0. SOLUTION: Apply APAR PK13936. PROVIDED AND/OR DISCOVERED BY: Reported by vendor. ORIGINAL ADVISORY: http://www-1.ibm.com/support/docview.wss?uid=swg1PK13936 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------