Informix Server GSKit 7.x <= / 8.0.50.x <= X.509 Certificate Chain DoS

High Nessus Plugin ID 80476


The remote host has an application that is affected by a denial of service vulnerability.


The remote Informix server ships with a version of IBM's Global Security kit (GSKit) library that is affected by a denial of service vulnerability. A remote attacker can exploit this issue via malformed X.509 certificate chain to cause the host to become unresponsive.

Note that this plugin only checks the version of IBM Informix Server and GSKit. It does not check for the presence of any workaround.


Upgrade the Informix server or apply the correct GSKit patch per the vendor advisory.

See Also

Plugin Details

Severity: High

ID: 80476

File Name: ibm_informix_server_swg21668664.nasl

Version: $Revision: 1.2 $

Type: local

Family: Misc.

Published: 2015/01/13

Modified: 2015/01/14

Dependencies: 70097, 67230

Risk Information

Risk Factor: High


Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:global_security_kit, cpe:/a:ibm:informix_dynamic_server

Required KB Items: installed_sw/IBM GSKit, installed_sw/IBM Informix Dynamic Server

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2014/04/06

Vulnerability Publication Date: 2014/04/06

Reference Information

CVE: CVE-2013-6747

BID: 65156

OSVDB: 102556