NetSight
IP …
medium5.0

CVE-2010-1612

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA…

Impact

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.

Affected products

VendorProductAffected versions
IbmWebsphere Datapower Xml Accelerator Xa35
through 3.7.3.10
Versions 3.7.2, 3.7.3, 3.7.3.1, 3.7.3.2, 3.7.3.3
IbmWebsphere Datapower Xml Security Gateway Xs40
through 3.7.3.10
Versions 3.7.2, 3.7.3, 3.7.3.1, 3.7.3.2, 3.7.3.3
IbmWebsphere Datapower Datapower Integration Appliance Xi50
through 3.7.3.10
Versions 3.7.2, 3.7.3, 3.7.3.1, 3.7.3.2, 3.7.3.3
IbmWebsphere Datapower B2b Appliance Xb60
through 3.7.3.10
Versions 3.7.3.1, 3.7.3.2, 3.7.3.3, 3.7.3.4, 3.7.3.5
IbmWebsphere Datapower Low Latency Appliance Xm70
through 3.7.3.10
Versions 3.7.3.1, 3.7.3.2, 3.7.3.3, 3.7.3.4, 3.7.3.5

References