CVE-2013-6747: Input Validation
First published: Mon Jan 27 2014(Updated: )
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Global Security Kit | =8.5 | |
| IBM Global Security Kit | =7.0 | |
| IBM Global Security Kit | =7.0.4.28 | |
| IBM Global Security Kit | =7.0.4.29 | |
| IBM Global Security Kit | =8.0 | |
| IBM Global Security Kit | =8.0.13 | |
| IBM Security Directory Server | ||
| IBM Tivoli Directory Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/102556
- http://secunia.com/advisories/56698
- http://secunia.com/advisories/56699
- http://www-01.ibm.com/support/docview.wss?uid=swg21662902
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554
- http://www-01.ibm.com/support/docview.wss?uid=swg21676091
- http://www-01.ibm.com/support/docview.wss?uid=swg21676092
- http://www.securitytracker.com/id/1029687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89863
Frequently Asked Questions
What is the severity of CVE-2013-6747?
CVE-2013-6747 has a medium severity rating due to its potential to cause a denial of service.
How do I fix CVE-2013-6747?
To fix CVE-2013-6747, upgrade to IBM GSKit version 7.0.4.48 or 8.0.50.16 or higher.
Which software is affected by CVE-2013-6747?
CVE-2013-6747 affects IBM GSKit versions 7.x prior to 7.0.4.48 and 8.x prior to 8.0.50.16, and also impacts IBM Security Directory Server and Tivoli Directory Server.
What types of attacks can CVE-2013-6747 facilitate?
CVE-2013-6747 can facilitate remote denial of service attacks through malformed X.509 certificate chains.
Is there a workaround for CVE-2013-6747?
There are no known workarounds for CVE-2013-6747, thus upgrading is the recommended action.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm global security kit
- version/ibm global security kit/8.5
- version/ibm global security kit/7.0
- version/ibm global security kit/7.0.4.28
- version/ibm global security kit/7.0.4.29
- version/ibm global security kit/8.0
- version/ibm global security kit/8.0.13
- canonical/ibm security directory server
- canonical/ibm tivoli directory server