This Interim Fix will upgrade your IBM Cognos TM1 9.5.2 release.
The TM1 Admin Server does not check the size of the data being sent to it which could permit a remote malicious attacker to perform a "Buffer Overflow" attack against the server running this software. The exposures range from crashing the TM1 Admin Server process through to potentially inserting code of their design to run within the TM1 Admin Server Process.
While IBM has not received any reports of customer issues related to these security vulnerabilities as of March 30, 2012, we strongly encourage all customers to download and apply this Interim Fix to prevent the vulnerability.
To install the Admin Server patch:
1. Stop the TM1 Server/Admin Server
2. Make a backup of the bin directory
3. Unzip the Admin Server patch
4. Copy the files into the bin directory
5. Restart the TM1 Server/Admin Server
On
[{"DNLabel":"TM1 9.5.2 IF4 WIN 32-bit","DNDate":"30 Mar 2012","DNLang":"Language Independent","DNSize":"156000000","DNPlat":{"label":"Windows","code":"PF033"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/quickorder?parent=Cognos&product=ibm/Information+Management/Cognos+TM1&release=9.5.2&platform=Windows+32-bit,+x86&function=fixId&fixids=9.5.2-BA-CTM1-Win32-IF004","DNURL_FTP":" ","DDURL":null},{"DNLabel":"TM1 9.5.2 IF4 WIN 64-bit","DNDate":"30 Mar 2012","DNLang":"Language Independent","DNSize":"169000000","DNPlat":{"label":"Windows","code":"PF033"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/quickorder?parent=Cognos&product=ibm/Information+Management/Cognos+TM1&release=9.5.2&platform=Windows+64-bit,+x86&function=fixId&fixids=9.5.2-BA-CTM1-Win64-IF004","DNURL_FTP":" ","DDURL":null},{"DNLabel":"TM1 9.5.2 IF4 AIX","DNDate":"30 Mar 2012","DNLang":"Language Independent","DNSize":"265000000","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/quickorder?parent=Cognos&product=ibm/Information+Management/Cognos+TM1&release=9.5.2&platform=AIX+64-bit,+pSeries&function=fixId&fixids=9.5.2-BA-CTM1-AIX64-IF004","DNURL_FTP":" ","DDURL":null},{"DNLabel":"TM1 9.5.2 IF4 Linux for x86","DNDate":"30 Mar 2012","DNLang":"Language Independent","DNSize":"147000000","DNPlat":{"label":"Linux","code":"PF016"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/quickorder?parent=Cognos&product=ibm/Information+Management/Cognos+TM1&release=9.5.2&platform=Linux+64-bit,x86_64&function=fixId&fixids=9.5.2-BA-CTM1-Linuxi38664-IF004","DNURL_FTP":" ","DDURL":null},{"DNLabel":"TM1 9.5.2 IF4 Solaris","DNDate":"30 Mar 2012","DNLang":"Language Independent","DNSize":"193000000","DNPlat":{"label":"Solaris","code":"PF027"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/quickorder?parent=Cognos&product=ibm/Information+Management/Cognos+TM1&release=9.5.2&platform=Solaris+64-bit,SPARC&function=fixId&fixids=9.5.2-BA-CTM1-Solaris64-IF004","DNURL_FTP":" ","DDURL":null}]
[{"Product":{"code":"SS9RXT","label":"Cognos TM1"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"TM1","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"9.5.2","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]