Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2014.1591
Security Bulletin: Open Source Apache Xalan-Java in Workplace XT and Apache
Commons FileUpload and Tomcat vulnerability in Workplace XT
15 September 2014
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: IBM Workplace XT
Publisher: IBM
Operating System: AIX
HP-UX
Linux variants
Solaris
Windows
Impact/Access: Denial of Service -- Remote/Unauthenticated
Unauthorised Access -- Remote/Unauthenticated
Resolution: Patch/Upgrade
Original Bulletin:
http://www-01.ibm.com/support/docview.wss?uid=swg21684289
http://www-01.ibm.com/support/docview.wss?uid=swg21684286
Comment: This bulletin contains two (2) IBM security advisories.
- --------------------------BEGIN INCLUDED TEXT--------------------
Security Bulletin: Open Source Apache Xalan-Java in Workplace XT
Security Bulletin
Document information
More support for:
FileNet Content Manager
Workplace XT
Software version:
1.1.5
Operating system(s):
AIX, HP-UX, Linux, Solaris, Windows
Reference #:
1684289
Modified date:
2014-09-12
Summary
Apache Xalan-Java could allow a remote attacker to bypass security
restrictions, caused by the improper handling of output properties. An
attacker could exploit this vulnerability to bypass the secure processing
feature to load arbitrary restricted classes.
Vulnerability Details
Apache Xalan-Java could allow a remote attacker to bypass security
restrictions, caused by the improper handling of output properties.
CVSS Base Score: 5
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/92023 for more
information
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:P/A:N)
Affected Products and Versions
Workplace XT 1.1
Remediation/Fixes
Version 1.1.1, 1.1.2, 1.1.3, 1.1.4: Upgrade to Workplace XT 1.1.5 and
apply 1.1.5.2-WPXT-IF002
Version 1.1.5: Apply Ifix 1.1.5.2-WPXT-IF002
Workarounds and Mitigations
None
References
Complete CVSS Guide
On-line Calculator V2
Complete CVSS Guide
On-line Calculator V2
Related information
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog
http://xforce.iss.net/xforce/xfdb/92023
*The CVSS Environment Score is customer environment specific and will
ultimately impact the Overall CVSS Score. Customers can evaluate the
impact of this vulnerability in their environments by accessing the links
in the Reference section of this Security Bulletin.
Disclaimer
According to the Forum of Incident Response and Security Teams (FIRST),
the Common Vulnerability Scoring System (CVSS) is an "industry open
standard designed to convey vulnerability severity and help to determine
urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS"
WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE
RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY
VULNERABILITY.
- ----------------------------------------------------------------------
Security Bulletin: Apache Commons FileUpload and Tomcat vulnerability in
Workplace XT
Security Bulletin
Document information
More support for:
FileNet Content Manager
Workplace XT
Software version:
1.1.5
Operating system(s):
AIX, HP-UX, Linux, Solaris, Windows
Reference #:
1684286
Modified date:
2014-09-12
Summary
Apache Commons FileUpload and Tomcat are vulnerable to a denial of
service, caused by the improper handling of Content-Type HTTP header for
multipart requests. By sending a specially-crafted request, an attacker
could exploit this vulnerability to cause the application to enter into an
infinite loop.
Vulnerability Details
Apache Commons FileUpload and Tomcat are vulnerable to a denial of service
CVSS Base Score: 5.0
CVSS Temporal Score: See http://xforce.iss.net/xforce/xfdb/90987 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Affected Products and Versions
Workplace XT 1.1
Remediation/Fixes
Version 1.1.1, 1.1.2, 1.1.3, 1.1.4: Upgrade to Workplace XT 1.1.5 and
apply 1.1.5.2-WPXT-IF002
Version 1.1.5: Apply Ifix 1.1.5.2-WPXT-IF002
Workarounds and Mitigations
None
References
Complete CVSS Guide
On-line Calculator V2
Complete CVSS Guide
On-line Calculator V2
Related information
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog
http://xforce.iss.net/xforce/xfdb/90987
*The CVSS Environment Score is customer environment specific and will
ultimately impact the Overall CVSS Score. Customers can evaluate the
impact of this vulnerability in their environments by accessing the links
in the Reference section of this Security Bulletin.
Disclaimer
According to the Forum of Incident Response and Security Teams (FIRST),
the Common Vulnerability Scoring System (CVSS) is an "industry open
standard designed to convey vulnerability severity and help to determine
urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS"
WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE
RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY
VULNERABILITY.
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBVBaCvBLndAQH1ShLAQIFjhAAiYyXP2EPVRKvY//fQQlTQ6eNo3Tf15Xh
UlsMGyE9LXtm/5N3bhwHE3ci5TaIm8+tXeDxtO5otb/LWezGiDV4QxQGM6QD5j1H
BxaJey2F/6AfBrcMxH1COCXSZMNRzame6XITlXDjqoqqgw31IdMBAs12r3+vXWke
4JtQfKT7xdaCS8dn0ysi9LrGakY2s3nNcIf/qNqSOEfLZsjyb9pZ+JYJsn+CBk+5
hnj6/vB/xyj69PA9B7eV1WiFybxQ+SfZ3akxI+QrikK7xTiZPw/IDfXk8Lt+y68t
ZIJtnQpes0sc4viqXNCiPUdU6mlm/URM8yDevnwnfc40XbiWvOe6DN7DekKGECg6
hXEuNc5zsQl/cbbu+eM7Ten4u64PlE0feO2IOJivNs9Or5TKu01j+n+ByxiFrSqc
uKrdwW8MhgqKP3y7qr8RWllybIh7srHC0X6igtJFI+a5PRa8DW0aRzVFT0wwh4+9
j/6RJKSQMjNcx4J/y0NmLkaWA54bRVY5uXBZrZgiUFioNklDHOFXtLBKHqXPlPub
r7Zitb/blyGq/NhKWj216Ut9THkqTwdYLdW6Y+wJPmQfesCuYG0X+vI4Ggwu5FOw
OpTYe3lWxR9ZH1zqhUdclGxDzEeQ0dCWNuXedlJD695fUFvNXjLCoEiNhcfMnxCB
xboAOtwNSVs=
=eOAv
-----END PGP SIGNATURE-----