CVE-2013-2960: Buffer Overflow
Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2960?
CVE-2013-2960 is classified as a medium severity vulnerability due to the potential for buffer overflow leading to arbitrary code execution.
How do I fix CVE-2013-2960?
To fix CVE-2013-2960, upgrade to one of the patched versions of IBM Tivoli Monitoring or IBM Application Manager for Smart Business as specified in the vendor's advisory.
Which versions are affected by CVE-2013-2960?
CVE-2013-2960 affects IBM Tivoli Monitoring versions 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, along with IBM Application Manager for Smart Business 1.2.1 before 1.2.1.0-TIV-IA.
What components are impacted by CVE-2013-2960?
CVE-2013-2960 specifically impacts the Basic Services component in IBM Tivoli Monitoring.
What risks does CVE-2013-2960 pose to my system?
CVE-2013-2960 may allow an attacker to execute arbitrary code on affected systems, potentially leading to system compromise.