Vulnerability-Lookup

CNVD-2018-20570

Vulnerability from cnvd - Published: 2018-10-11

Title

IBM Networking Operating System信息泄露漏洞

Description

IBM System Networking和Blade Network Technology（BNT）switches都是美国IBM公司的交换机产品。IBM Networking Operating System是运行在其中的一套适用于交换机的操作系统。 IBM System Networking和BNT交换机中的IBM Networking Operating System的Fibre Channel over Ethernet (FCoE)功能存在安全漏洞。攻击者可通过监听广播区域利用该漏洞获取敏感信息。

Severity

低

Patch Name

IBM Networking Operating System信息泄露漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://www.ibm.com/

Reference

https://exchange.xforce.ibmcloud.com/vulnerabilities/83166 https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715

Impacted products

Name
IBM Networking Operating System

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2013-0570"
    }
  },
  "description": "IBM System Networking\u548cBlade Network Technology\uff08BNT\uff09switches\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea4\u6362\u673a\u4ea7\u54c1\u3002IBM Networking Operating System\u662f\u8fd0\u884c\u5728\u5176\u4e2d\u7684\u4e00\u5957\u9002\u7528\u4e8e\u4ea4\u6362\u673a\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nIBM System Networking\u548cBNT\u4ea4\u6362\u673a\u4e2d\u7684IBM Networking Operating System\u7684Fibre Channel over Ethernet (FCoE)\u529f\u80fd\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u76d1\u542c\u5e7f\u64ad\u533a\u57df\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "IBM",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.ibm.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-20570",
  "openTime": "2018-10-11",
  "patchDescription": "IBM System Networking\u548cBlade Network Technology\uff08BNT\uff09switches\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea4\u6362\u673a\u4ea7\u54c1\u3002IBM Networking Operating System\u662f\u8fd0\u884c\u5728\u5176\u4e2d\u7684\u4e00\u5957\u9002\u7528\u4e8e\u4ea4\u6362\u673a\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nIBM System Networking\u548cBNT\u4ea4\u6362\u673a\u4e2d\u7684IBM Networking Operating System\u7684Fibre Channel over Ethernet (FCoE)\u529f\u80fd\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u76d1\u542c\u5e7f\u64ad\u533a\u57df\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002 \u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "IBM Networking Operating System\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "IBM Networking Operating System"
  },
  "referenceLink": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83166\r\nhttps://www-304.ibm.com/support/docview.wss?uid=isg3T1019715",
  "serverity": "\u4f4e",
  "submitTime": "2018-07-17",
  "title": "IBM Networking Operating System\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2013-0570 (GCVE-0-2013-0570)

Vulnerability from cvelistv5 – Published: 2018-07-13 21:00 – Updated: 2024-08-06 14:33

Summary

The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166.

Severity

No CVSS data available.

CWE

Assigner

ibm

References

2 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://www-304.ibm.com/support/docview.wss?uid=i…	x_refsource_CONFIRM

Date Public

2013-07-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T14:33:05.180Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ibm-networking-cve20130570(83166)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83166"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-07-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-13T20:57:01.000Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "name": "ibm-networking-cve20130570(83166)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83166"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "ID": "CVE-2013-0570",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ibm-networking-cve20130570(83166)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83166"
            },
            {
              "name": "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715",
              "refsource": "CONFIRM",
              "url": "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2013-0570",
    "datePublished": "2018-07-13T21:00:00.000Z",
    "dateReserved": "2012-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-06T14:33:05.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-20570

CVE-2013-0570 (GCVE-0-2013-0570)

Tags

Sightings

Nomenclature