CVE-2013-2960: Buffer Overflow
First published: Fri Jun 21 2013(Updated: )
Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Monitoring | =6.2.0 | |
| IBM Tivoli Monitoring | =6.2.0.1 | |
| IBM Tivoli Monitoring | =6.2.0.2 | |
| IBM Tivoli Monitoring | =6.2.0.3 | |
| IBM Tivoli Monitoring | =6.2.1 | |
| IBM Tivoli Monitoring | =6.2.1.1 | |
| IBM Tivoli Monitoring | =6.2.1.2 | |
| IBM Tivoli Monitoring | =6.2.1.3 | |
| IBM Tivoli Monitoring | =6.2.1.4 | |
| IBM Tivoli Monitoring | =6.2.2 | |
| IBM Tivoli Monitoring | =6.2.2.1 | |
| IBM Tivoli Monitoring | =6.2.2.2 | |
| IBM Tivoli Monitoring | =6.2.2.3 | |
| IBM Tivoli Monitoring | =6.2.2.4 | |
| IBM Tivoli Monitoring | =6.2.2.5 | |
| IBM Tivoli Monitoring | =6.2.2.6 | |
| IBM Tivoli Monitoring | =6.2.2.7 | |
| IBM Tivoli Monitoring | =6.2.2.8 | |
| IBM Tivoli Monitoring | =6.2.2.9 | |
| IBM Tivoli Monitoring | =6.2.3 | |
| IBM Tivoli Monitoring | =6.2.3.1 | |
| IBM Tivoli Monitoring | =6.2.3.2 | |
| IBM Application Manager for Smart Business | =1.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116
- http://www-01.ibm.com/support/docview.wss?uid=swg21635080
- http://www-01.ibm.com/support/docview.wss?uid=swg21640752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83724
Frequently Asked Questions
What is the severity of CVE-2013-2960?
CVE-2013-2960 is classified as a medium severity vulnerability due to the potential for buffer overflow leading to arbitrary code execution.
How do I fix CVE-2013-2960?
To fix CVE-2013-2960, upgrade to one of the patched versions of IBM Tivoli Monitoring or IBM Application Manager for Smart Business as specified in the vendor's advisory.
Which versions are affected by CVE-2013-2960?
CVE-2013-2960 affects IBM Tivoli Monitoring versions 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, along with IBM Application Manager for Smart Business 1.2.1 before 1.2.1.0-TIV-IA.
What components are impacted by CVE-2013-2960?
CVE-2013-2960 specifically impacts the Basic Services component in IBM Tivoli Monitoring.
What risks does CVE-2013-2960 pose to my system?
CVE-2013-2960 may allow an attacker to execute arbitrary code on affected systems, potentially leading to system compromise.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- vendor/ibm
- canonical/ibm tivoli monitoring
- version/ibm tivoli monitoring/6.2.0
- version/ibm tivoli monitoring/6.2.0.1
- version/ibm tivoli monitoring/6.2.0.2
- version/ibm tivoli monitoring/6.2.0.3
- version/ibm tivoli monitoring/6.2.1
- version/ibm tivoli monitoring/6.2.1.1
- version/ibm tivoli monitoring/6.2.1.2
- version/ibm tivoli monitoring/6.2.1.3
- version/ibm tivoli monitoring/6.2.1.4
- version/ibm tivoli monitoring/6.2.2
- version/ibm tivoli monitoring/6.2.2.1
- version/ibm tivoli monitoring/6.2.2.2
- version/ibm tivoli monitoring/6.2.2.3
- version/ibm tivoli monitoring/6.2.2.4
- version/ibm tivoli monitoring/6.2.2.5
- version/ibm tivoli monitoring/6.2.2.6
- version/ibm tivoli monitoring/6.2.2.7
- version/ibm tivoli monitoring/6.2.2.8
- version/ibm tivoli monitoring/6.2.2.9
- version/ibm tivoli monitoring/6.2.3
- version/ibm tivoli monitoring/6.2.3.1
- version/ibm tivoli monitoring/6.2.3.2
- canonical/ibm application manager for smart business
- version/ibm application manager for smart business/1.2.1