----------------------------------------------------------------------

Did you know? Our assessment and impact rating along with detailed
information such as exploit code availability, or if an updated patch
is released by the vendor, is not part of this mailing-list?
        
Click here to learn more about our commercial solutions:
http://secunia.com/advisories/business_solutions/
        
Click here to trial our solutions:
http://secunia.com/advisories/try_vi/

----------------------------------------------------------------------

TITLE:
IBM Director CIM Server Privilege Escalation and Denial of Service

SECUNIA ADVISORY ID:
SA34212

VERIFY ADVISORY:
http://secunia.com/advisories/34212/

DESCRIPTION:
Bernhard Mueller has reported some vulnerabilities in IBM Director,
which can be exploited by malicious, local users to gain escalated
privileges and by malicious people to cause a DoS (Denial of
Service).

1) An unspecified error when processing requests to the CIM server
can be exploited to cause the CIM Server to crash via requests
containing overly long consumer names.

2) An input validation error in the CIM server when processing
indication requests can be exploited to load arbitrary dll files from
the local system via directory traversal attacks.

Successful exploitation of this vulnerability allows execution of
arbitrary code with escalated privileges, but requires file system
access to the affected system.

The vulnerabilities are reported in versions prior to 5.20.3 Service
Update 2.

SOLUTION:
Reportedly fixed in 5.20.3 Service Update 2.

PROVIDED AND/OR DISCOVERED BY:
Bernhard Mueller, SEC Consult Vulnerability Lab

ORIGINAL ADVISORY:
SEC Consult Vulnerability Lab:
https://www.sec-consult.com/files/20090305-1_IBM_director_DoS.txt
https://www.sec-consult.com/files/20090305-2_IBM_director_privilege_escalation.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------