National Cyber Awareness System

Vulnerability Summary for CVE-2006-2201

Overview

Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key 0.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Solution

This vulnerability affects all z/OS releases of this product prior to May 2, 2006. This vulnerability is addressed in the 20060502 release of this product.}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 17840

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/17840

External Source: BUGTRAQ

Name: 20060508 CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/433246/100/0/threaded

External Source: SECTRACK

Name: 1016028

Type: Patch Information

Hyperlink:http://securitytracker.com/id?1016028

External Source: SECUNIA

Name: 19953

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/19953

External Source: XF

Name: cairim-lmp-privilege-escalation(26234)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26234

External Source: VUPEN

Name: ADV-2006-1656

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/1656

External Source: OSVDB

Name: 25234

Hyperlink:http://www.osvdb.org/25234

External Source: CONFIRM

Name: http://supportconnectw.ca.com/public/ca_common_docs/cairimsecurity-notice.asp

Type: Advisory

Hyperlink:http://supportconnectw.ca.com/public/ca_common_docs/cairimsecurity-notice.asp

External Source: MISC

Name: http://supportconnectw.ca.com/public/ca_common_docs/cairim-affprods.asp

Hyperlink:http://supportconnectw.ca.com/public/ca_common_docs/cairim-affprods.asp