IBM Tivoli Storage Manager Server 6.2 < 6.2.7 / 6.3 < 6.3.5 / 7.1 < 7.1.1 GSKit X.509 Certificate Chain DoS

High Nessus Plugin ID 80478


The remote backup service is affected by a denial of service vulnerability.


The version of IBM Tivoli Storage Manager installed on the remote host is affected by a denial of service vulnerability. A remote attacker can exploit this issue via malformed X.509 certificate chain to cause the host to become unresponsive.


Upgrade IBM Tivoli Storage Manager or apply the correct GSKit patch.
Alternatively, apply the workaround per the vendor advisory.

See Also

Plugin Details

Severity: High

ID: 80478

File Name: ibm_tsm_server_7_1_1.nasl

Version: $Revision: 1.2 $

Type: remote

Family: General

Published: 2015/01/13

Modified: 2015/01/14

Dependencies: 25656

Risk Information

Risk Factor: High


Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:tivoli_storage_manager

Required KB Items: installed_sw/IBM Tivoli Storage Manager

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2014/06/09

Vulnerability Publication Date: 2014/06/09

Reference Information

CVE: CVE-2013-6747

BID: 65156

OSVDB: 102556