Vulnerability Details CVE-2013-6747
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.7%
CVSS Severity
CVSS v2 Score 7.1
References
- http://osvdb.org/102556
- http://secunia.com/advisories/56698
- http://secunia.com/advisories/56699
- http://www-01.ibm.com/support/docview.wss?uid=swg21662902
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554
- http://www-01.ibm.com/support/docview.wss?uid=swg21676091
- http://www-01.ibm.com/support/docview.wss?uid=swg21676092
- http://www.securitytracker.com/id/1029687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89863
- http://osvdb.org/102556
- http://secunia.com/advisories/56698
- http://secunia.com/advisories/56699
- http://www-01.ibm.com/support/docview.wss?uid=swg21662902
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554
- http://www-01.ibm.com/support/docview.wss?uid=swg21676091
- http://www-01.ibm.com/support/docview.wss?uid=swg21676092
- http://www.securitytracker.com/id/1029687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89863
Products affected by CVE-2013-6747
-
cpe:2.3:a:ibm:global_security_kit:7.0
-
cpe:2.3:a:ibm:global_security_kit:7.0.4.28
-
cpe:2.3:a:ibm:global_security_kit:7.0.4.29
-
cpe:2.3:a:ibm:global_security_kit:8.0
-
cpe:2.3:a:ibm:global_security_kit:8.0.13
-
cpe:2.3:a:ibm:global_security_kit:8.5
-
cpe:2.3:a:ibm:security_directory_server:-
-
cpe:2.3:a:ibm:tivoli_directory_server:-