Login Request a demo
Unscored severity · published Jan 27, 2014
CVE-2013-6747
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a…
–
CVSS
2.2%
EPSS
No
On KEV
Description
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Global Security Kit · Ibm
8.5; 7.0; 7.0.4.28; 7.0.4.29; 8.0; 8.0.13 · source: NVD
SD
Security Directory Server · Ibm
All versions, or not specified · source: NVD
TD
Tivoli Directory Server · Ibm
All versions, or not specified · source: NVD
Affected product
GS
Global Security Kit
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6747
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6747
osvdb.org
http://osvdb.org/102556
secunia.com
http://secunia.com/advisories/56698
secunia.com
http://secunia.com/advisories/56699
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21662902
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21669554
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676091
More from Global Security Kit
–
CVE-2013-6329
IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted…
–
CVE-2012-2203
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for…
–
CVE-2012-2191
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data…