Unscored severity · published Aug 8, 2012
CVE-2012-2191
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data…
–
CVSS
3.9%
EPSS
No
On KEV
Description
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Global Security Kit · Ibm
through 8.0.13; 7.0.4.28; 7.0.4.29 · source: NVD
RD
Rational Directory Server · Ibm
All versions, or not specified · source: NVD
TD
Tivoli Directory Server · Ibm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2191
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2191
secunia.com
http://secunia.com/advisories/51279
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV31980
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV31981
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21606145
www.securityfocus.com
http://www.securityfocus.com/bid/54743
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75996
More from Global Security Kit
–
CVE-2013-6747
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a…
–
CVE-2013-6329
IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted…
–
CVE-2012-2203
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for…