製品・ソフトウェアに関する情報
Vulnerability Search
IBM WebSphere DataPower XML Accelerator XA35 などの製品におけるサービス運用妨害 (DoS) の脆弱性
Title IBM WebSphere DataPower XML Accelerator XA35 などの製品におけるサービス運用妨害 (DoS) の脆弱性
Summary

IBM WebSphere DataPower XML Accelerator XA35、Low Latency Appliance XM70、Integration Appliance XI50、B2B Appliance XB60、および XML Security Gateway XS40 SOA Appliances には、QLOGIC Ethernet インターフェースが使用されている際、サービス運用妨害 (インターフェース停止) 状態となる脆弱性が存在します。

Possible impacts 第三者により、送信先 IP アドレス 0.0.0.0 への不正な ICMP パケットを介して、サービス運用妨害 (インターフェース停止) 状態にされる可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date April 25, 2010, midnight
Registration Date Sept. 25, 2012, 5:38 p.m.
Last Update Sept. 25, 2012, 5:38 p.m.
CVSS2.0 : 警告
Score 5
Vector AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected System
IBM
IBM WebSphere DataPower B2B アプライアンス XB60 
IBM WebSphere DataPower Integration アプライアンス XI50 
IBM WebSphere DataPower Low Latency アプライアンス XM70 
IBM WebSphere DataPower XML Accelerator XA35 
IBM WebSphere DataPower XML Security Gateway XS40 3.8.0.0 未満の SOA Appliances
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
0 [2012年09月25日]
  掲載		 Feb. 17, 2018, 10:37 a.m.
NVD Vulnerability Information
CVE-2010-1612
Summary

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.

Publication Date April 30, 2010, 4:30 a.m.
Registration Date Jan. 29, 2021, 11 a.m.
Last Update Oct. 11, 2018, 4:57 a.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:*:*:*:*:*:*:*:* 3.7.3.10
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.4:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:*:*:*:*:*:*:*:* 3.7.3.10
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.4:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:*:*:*:*:*:*:*:* 3.7.3.10
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.03:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*
Configuration4 or higher or less more than less than
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:*:*:*:*:*:*:*:* 3.7.3.10
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.4:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*
Configuration5 or higher or less more than less than
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:*:*:*:*:*:*:*:* 3.7.3.10
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.4:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List