CVE-2013-6747

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.

Score

CVSS 2.0 7.1 High

Status

Modified - psirt@us.ibm.com

Published

2014-01-27

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Global Security Kit (Ibm)
• Security Directory Server (Ibm)
• Tivoli Directory Server (Ibm)

References

• http://osvdb.org/102556
• http://secunia.com/advisories/56698
• http://secunia.com/advisories/56699
• http://www-01.ibm.com/support/docview.wss?uid=swg21662902
• http://www-01.ibm.com/support/docview.wss?uid=swg21669554
• http://www-01.ibm.com/support/docview.wss?uid=swg21676091
• http://www-01.ibm.com/support/docview.wss?uid=swg21676092
• http://www.securitytracker.com/id/1029687
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89863