Duffbert's Random Musings :: IBM Lotus Sametime Connect Webcontainer Unspecified Vulnerability (along with IBM technote addressing it)

Category IBM/Lotus
Secunia Advisory SA41463
IBM Lotus Sametime Connect Webcontainer Unspecified Vulnerability
Secunia Advisory SA41463

Release Date 2010-09-15

Criticality level Moderately critical
Impact Unknown
Where From remote
Authentication level Available in Customer Area

Report reliability Available in Customer Area
Solution Status Vendor Patch

Systems affected Available in Customer Area
Approve distribution Available in Customer Area

Software:
IBM Lotus Sametime 8.x

Secunia CVSS Score Available in Customer Area
CVE Reference(s) No CVE references.

Description
A vulnerability with an unknown impact has been reported in IBM Lotus Sametime.

The vulnerability is caused due an unspecified error in the Sametime Connect webcontainer. No further information is currently available.

The vulnerability is reported in IBM Sametime 8.5.1 running on Linux, Mac OS X, and Windows.

Solution
Apply Sametime Connect 8.5.1 Cumulative Fix Pack 1.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
IBM (LXUU87S57H and LXUU87S93W):
http://www.ibm.com/support/docview.wss?uid=swg21445669

--------------------------------------------------------------

IBM Lotus Sametime Connect 8.5.1 Cumulative Fix pack 1 (CF1) Release Notice September 07, 2010
A picture named M2

News

Abstract

IBM Lotus announces the release of Sametime Connect 8.5.1 Cumulative Fix pack 1 (CF1), a cumulative set of all fixes to help customers safely avoid known issues. Included are fixes for Sametime 8.5.1 Connect standalone and Sametime 8.5.1 Connect embedded for Notes 8.5.2 clients. These issues have been discovered by IBM Lotus during the deployment, use, and testing of Sametime Connect 8.5.1.
IBM recommends that customers running Sametime Connect 8.5.1 standalone or the embedded version within Notes 8.5.x upgrade to this Fix Pack to reach a greater level of stability. Future Fix Packs are always cumulative and contain all of the fixes from previous versions.
Customers can continue to apply future Sametime Connect 8.5.1 Hotfixes for both the standalone and embedded client after applying this cumulative fix.