Vulnerability Details CVE-2013-2960
Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116
- http://www-01.ibm.com/support/docview.wss?uid=swg21635080
- http://www-01.ibm.com/support/docview.wss?uid=swg21640752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83724
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116
- http://www-01.ibm.com/support/docview.wss?uid=swg21635080
- http://www-01.ibm.com/support/docview.wss?uid=swg21640752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83724
Products affected by CVE-2013-2960
-
cpe:2.3:a:ibm:application_manager_for_smart_business:1.2.1
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.0
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.1
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.3
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1
-
cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2