IBM General Parallel File System OpenSSL Security Bypass (Windows)

medium Nessus Plugin ID 76428

Language:

Synopsis

A clustered file system on the remote host is affected by a security vulnerability.

Description

A version of IBM General Parallel File System (GPFS) 3.5.0.11 or later but prior to 3.5.0.18 is installed on the remote host. It is, therefore, affected by an unspecified error that could allow an attacker to cause usage of weak keying material, leading to simplified man-in-the-middle attacks.

Solution

Upgrade to GPFS 3.5.0.18 or later.

Plugin Details

Severity: Medium

ID: 76428

File Name: ibm_gpfs_isg3t1020948_windows.nasl

Version: 1.6

Type: local

Agent: windows

Family: Windows

Published: 7/9/2014

Updated: 11/26/2019

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.7

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2014-0224

Vulnerability Information

CPE: cpe:/a:ibm:general_parallel_file_system

Required KB Items: SMB/ibm_gpfs/path, SMB/ibm_gpfs/version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/18/2014

Vulnerability Publication Date: 6/5/2014

Exploitable With

Core Impact

Reference Information

CVE: CVE-2014-0224

BID: 67899

CERT: 978508

Detections

Analytics