IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion.
Weakness
The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Engineering_lifecycle_management | Ibm | 7.0.3 (including) | 7.0.3 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix001 (including) | 7.0.3-ifix001 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix002 (including) | 7.0.3-ifix002 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix003 (including) | 7.0.3-ifix003 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix004 (including) | 7.0.3-ifix004 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix005 (including) | 7.0.3-ifix005 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix006 (including) | 7.0.3-ifix006 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix007 (including) | 7.0.3-ifix007 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix008 (including) | 7.0.3-ifix008 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix009 (including) | 7.0.3-ifix009 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix010 (including) | 7.0.3-ifix010 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix011 (including) | 7.0.3-ifix011 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix012 (including) | 7.0.3-ifix012 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix013 (including) | 7.0.3-ifix013 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix014 (including) | 7.0.3-ifix014 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix015 (including) | 7.0.3-ifix015 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix016 (including) | 7.0.3-ifix016 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix017 (including) | 7.0.3-ifix017 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix018 (including) | 7.0.3-ifix018 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix018_security_fix (including) | 7.0.3-ifix018_security_fix (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix019 (including) | 7.0.3-ifix019 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix020 (including) | 7.0.3-ifix020 (including) |
| Engineering_lifecycle_management | Ibm | 7.0.3-ifix021 (including) | 7.0.3-ifix021 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0 (including) | 7.1.0 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix001 (including) | 7.1.0-ifix001 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix0010 (including) | 7.1.0-ifix0010 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix002 (including) | 7.1.0-ifix002 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix003 (including) | 7.1.0-ifix003 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix004 (including) | 7.1.0-ifix004 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix004_security_fix (including) | 7.1.0-ifix004_security_fix (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix005 (including) | 7.1.0-ifix005 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix006 (including) | 7.1.0-ifix006 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix007 (including) | 7.1.0-ifix007 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix008 (including) | 7.1.0-ifix008 (including) |
| Engineering_lifecycle_management | Ibm | 7.1.0-ifix009 (including) | 7.1.0-ifix009 (including) |
| Engineering_lifecycle_management | Ibm | 7.2.0 (including) | 7.2.0 (including) |
| Engineering_lifecycle_management | Ibm | 7.2.0-ifix001 (including) | 7.2.0-ifix001 (including) |