IBM Tivoli Directory Server 6.1 < / 6.2 < / 6.3 < Denial of Service

This script is Copyright (C) 2014 Tenable Network Security, Inc.

Synopsis :

The version of IBM Tivoli Directory Server is affected by a denial of
service vulnerability.

Description :

The remote Windows host is running a Version of IBM Tivoli Server
Directory prior to / / and a version of
GSKit prior to / It is, therefore, affected by a
denial of service vulnerability due to a flaw in the GSKit component.
An attacker can exploit this vulnerability via a malformed X.509
certificate chain to cause an application crash or hang.

See also :

Solution :

Install the appropriate fix based on the vendor's advisory :


Alternatively, upgrade GSKit to or

Risk factor :

High / CVSS Base Score : 7.1
CVSS Temporal Score : 6.2
Public Exploit Available : false

Family: Windows

Nessus Plugin ID: 72220 ()

Bugtraq ID: 65156

CVE ID: CVE-2013-6747