CVE-2010-4593

Published: Dec 22, 2010Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices.

Affected (4)

Products: Ibm: Lotus Mobile Connect

1 product

Lotus Mobile Connect

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Lotus Mobile Connect	Up to 6.1.3
Ibm Lotus Mobile Connect	Version 6.1.1.1
Ibm Lotus Mobile Connect	Version 6.1.1
Ibm Lotus Mobile Connect	Version 6.1.2

Related CWEs

References (6)

http://secunia.com/advisories/42703

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75012

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=swg27020327

Source: cve@mitre.org

http://secunia.com/advisories/42703

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75012

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg27020327

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.