Informix Server GSKit < / SSL/TLS DoS

High Nessus Plugin ID 72118


The remote host has an application that is affected by a denial of service vulnerability.


The remote Informix server ships with a version of IBM's Global Security kit (GSKit) library that is affected by a denial of service vulnerability in the SSL/TLS handshake processing code.

Note that this plugin only checks the version of IBM Informix Server and GSKit. It does not check for the presence of any workaround.


Upgrade the Informix server or apply the correct GSKit patch per the vendor advisory.

See Also

Plugin Details

Severity: High

ID: 72118

File Name: ibm_informix_server_swg21660436.nasl

Version: $Revision: 1.5 $

Type: local

Family: Misc.

Published: 2014/01/24

Modified: 2017/07/05

Dependencies: 67230, 70097

Risk Information

Risk Factor: High


Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:global_security_kit, cpe:/a:ibm:informix_dynamic_server

Required KB Items: installed_sw/IBM GSKit, installed_sw/IBM Informix Dynamic Server, Settings/ParanoidReport

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2014/01/09

Vulnerability Publication Date: 2014/01/09

Reference Information

CVE: CVE-2013-6329

BID: 64249

OSVDB: 100864