February 2005

ID: 00165
Ref: 148/2005
Date: 24 February 2005:14:05:53
Version: 1

---

Title: IBM Security Advisory - HMC (Hardware Management Console) Security Fix
Abstract:
Vendors affected: Microsoft
Operating systems affected: Microsoft
Applications affected: Microsoft

---

Title
=====

IBM Security Advisory - HMC (Hardware Management Console) Security Fix

Detail
======

Announcing a security fix for HMC Version 4 Release 2.0
and above. This package fixes an HMC security issue with
the Guided Setup Wizard. User(s) with no privileges may be
able to launch the Guided Setup Wizard at the local HMC
console to perform tasks provided by the Wizard. This
service package is referenced by APAR MB00913.



- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================


ESB-2005.0184 -- IBM Security Advisory
HMC (Hardware Management Console) Security Fix
24 February 2005

===========================================================================



Product: HMC version 4, release 2.0 and above
Publisher: IBM
Platform: IBM POWER4 and POWER5 servers
Impact: Inappropriate Access
Access: Console/Physical

- - --------------------------BEGIN INCLUDED TEXT--------------------

1) Hardware management console : Security fixes
(2005.02.23)
Guided Setup Wizard Security Fix

Announcing a security fix for HMC Version 4 Release 2.0
and above. This package fixes an HMC security issue with
the Guided Setup Wizard. User(s) with no privileges may be
able to launch the Guided Setup Wizard at the local HMC
console to perform tasks provided by the Wizard. This
service package is referenced by APAR MB00913.

Download HMC fixes http://techsupport.services.ibm.com/server/hmc

- - ---------------------------------------------------------------------

Related URLs:

Find end of support dates for AIX and software running on AIX
http://www.ibm.com/services/sl/products

Visit pSeries Support for a wide array of technical resources.
http://www.ibm.com/server/eserver/support/pseries

Download fixes for AIX V5 and 4.3 OS, Java, Compilers:
http://www.ibm.com/servers/eserver/support/pseries/aixfixes.html

Update your Subscription Service profile
https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=2

Unsubscribe from Subscription Service
https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=3

Sign up for customized weekly newsletter from IBM
https://isource.ibm.com/world/index.shtml

- - ----------------------------------------------------------------------
IBM, eServer and pSeries are trademarks or registered trademarks of the
International Business Machines Corporation in the United States or
other countries, or both. ALL INFORMATION IS PROVIDED BY IBM ON AN
"AS IS" BASIS ONLY. IBM PROVIDES NO REPRESENTATIONS OR WARRANTIES,
EXPRESS OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF FITNESS FOR
A PARTICULAR PURPOSE, MERCHANTABILITY AND NONINFRINGMENT. This
document may be copied provided all text is included and copies
contain IBM's copyright notice and any other notices provided herein.

- - --------------------------END INCLUDED TEXT--------------------

iQCVAwUBQh0wQyh9+71yA2DNAQKF5wP+NSGGKQKmwJ2dbJ2V2AthqT1PS5AKRea/
JaW59HzZgtqbqv05MsY56wYy4L0znWb2nQ1+WzsDeLFD8m8zHDis6Emkos2/8gy/
Kf0GrLiZa2R9vvBjb5xOxtk6TBu9ONodj3+d8GGTU8TI7+/a/Pi7wmcNaKbjuj2w
oBEDGWNjJR8=
=xgR8
- -----END PGP SIGNATURE-----