IBM Tivoli Storage Manager Server 6.2 < 6.2.7 / 6.3 < 6.3.5 / 7.1 < 7.1.1 GSKit X.509 Certificate Chain DoS

high Nessus Plugin ID 80478

Language:

Synopsis

The remote backup service is affected by a denial of service vulnerability.

Description

The version of IBM Tivoli Storage Manager installed on the remote host is affected by a denial of service vulnerability. A remote attacker can exploit this issue via malformed X.509 certificate chain to cause the host to become unresponsive.

Solution

Upgrade IBM Tivoli Storage Manager or apply the correct GSKit patch.
Alternatively, apply the workaround per the vendor advisory.

Plugin Details

Severity: High

ID: 80478

File Name: ibm_tsm_server_7_1_1.nasl

Version: 1.4

Type: remote

Family: General

Published: 1/13/2015

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: High

Base Score: 7.1

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: cpe:/a:ibm:tivoli_storage_manager

Required KB Items: installed_sw/IBM Tivoli Storage Manager

Exploit Ease: No known exploits are available

Patch Publication Date: 6/9/2014

Vulnerability Publication Date: 6/9/2014

Reference Information

CVE: CVE-2013-6747

BID: 65156

Detections

Analytics