Vulnerability CVE-2013-6747 - CERT Civis.Net

Vulnerability Name:

CVE-2013-6747 (CCN-89863)

Assigned:

2013-11-08

Published:

2014-01-24

Updated:

2017-08-29

Summary:

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.

CVSS v3 Severity:

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

7.1 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C)
5.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

7.1 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2013-6747

Source: OSVDB
Type: UNKNOWN
102556

Source: CCN
Type: SA56403
IBM Tivoli Access Manager for e-business GSKit Denial of Service Vulnerability

Source: CCN
Type: SA56662
IBM HTTP Server GSKit Denial of Service Vulnerability

Source: CCN
Type: SA56698
IBM Global Security ToolKit Malformed Certificate Chain Denial of Service Vulnerability

Source: SECUNIA
Type: UNKNOWN
56698

Source: CCN
Type: SA56699
IBM Global Security ToolKit Malformed Certificate Chain Denial of Service Vulnerability

Source: SECUNIA
Type: UNKNOWN
56699

Source: CCN
Type: SA56976
IBM Security Access Manager for Web GSKit Denial of Service Vulnerability

Source: CCN
Type: SA57521
IBM Rational ClearQuest GSKit Denial of Service Vulnerability

Source: CCN
Type: SA57860
IBM TXSeries for Multiplatforms GSKit Malformed Certificate Chain Denial of Service Vulnerability

Source: CCN
Type: SA58066
IBM License Metric Tool / Tivoli Asset Discovery for Distributed GSKit Denial of Service Vulnerability

Source: CCN
Type: IBM Security Bulletin 1662902
GSKit certificate chain vulnerability in IBM Security Directory Server and Tivoli Directory Server (CVE-2013-6747)

Source: CONFIRM
Type: Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21662902

Source: CCN
Type: IBM Security Bulletin 1663428
Tivoli Netcool/OMNIbus can be affected by vulnerabilities in the IBM GSKit library

Source: CCN
Type: IBM Security Bulletin 1663941
Security Bulletin: Potential Security vulnerability in IBM HTTP Server CVE-2013-6747

Source: CCN
Type: IBM Security Bulletin 1664756
IBM GSKit Certificate Chain Vulnerability in IBM Security Access Manager for Web Gateway Appliance (CVE-2013-6747)

Source: CCN
Type: IBM Security Bulletin 1665137
GSKit Certificate Chain Vulnerability

Source: CCN
Type: IBM Security Bulletin 1666421
IBM Security Bulletin: Vulnerabilities in ClearQuest GSKit Component (CVE-2013-6747) - United States

Source: CCN
Type: IBM Security Bulletin 1668345
Tivoli Netcool/OMNIbus Web GUI Potential Security vulnerability in IBM HTTP Server CVE-2013-6747

Source: CCN
Type: IBM Security Bulletin 1668535
IBM Security Bulletin: Content Manager Enterprise Edition and GSKit Vulnerability (CVE-2013-6747) - United States

Source: CONFIRM
Type: Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21669554

Source: CONFIRM
Type: Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676091

Source: CONFIRM
Type: Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676092

Source: CCN
Type: IBM Security Bulletin 1662006
Vulnerabilities in ClearCase GSKit Component (CVE-2013-6747)

Source: CCN
Type: IBM Security Bulletin 1668664
Potential SSL/TLS-related denial of service vulnerability in IBM Informix Server (CVE-2013-6747)

Source: CCN
Type: IBM Security Bulletin 1668675
Potential SSL/TLS-related denial of service vulnerability in GSKit used with IBM Informix Client Software Development Kit (CSDK) (CVE-2013-6747)

Source: CCN
Type: IBM Security Bulletin 1669554
Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.2

Source: CCN
Type: IBM Security Bulletin 1670524
TSM FastBack GSKit Certificate Chaining Vulnerability (CVE-2013-6747)

Source: CCN
Type: IBM Security Bulletin 1670831
Vulnerability GSKit Certificate Chain Vulnerability (CVE-2013-6747)

Source: CCN
Type: IBM Security Bulletin 1671544
GSKit certificate chain vulnerability in Rational DOORS (CVE-2013-6747)

Source: CCN
Type: IBM Security Bulletin 1671732
IBM DB2 is impacted by multiple TLS/SSL security vulnerabilities (CVE-2013-6747, CVE-2014-0963)

Source: CCN
Type: IBM Security Bulletin 1674824
Tivoli Storage Manager Server Certificate Chaining Vulnerability (CVE-2013-6747 )

Source: CCN
Type: IBM Security Bulletin 1676091
Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.33

Source: CCN
Type: IBM Security Bulletin 1676092
Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.9

Source: CCN
Type: IBM Security Bulletin 1685323
Potential Security Vulnerability in IBM Tivoli Monitoring GSKit (CVE-2014-6747, CVE-2013-6329, CVE-2014-0169)

Source: CCN
Type: BID-65156
Multiple IBM Products CVE-2013-6747 Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1029687

Source: XF
Type: UNKNOWN
ibm-gskit-cve20136747-dos(89863)

Source: XF
Type: UNKNOWN
ibm-gskit-cve20136747-cert-chain(89863)

Source: CCN
Type: IBM Security Bulletin 1671713
Security Bulletin: GSKit certificate chain vulnerability in IBM Tivoli Netview for z/OS v5.2, 5.3, 5.4, 6.1 & 6.2 (component: Tivoli NetView Management Console Topology Server only) (CVE-2013-6746)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:global_security_kit:8.5:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:ibm:global_security_kit:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:global_security_kit:7.0.4.28:*:*:*:*:*:*:*

OR cpe:/a:ibm:global_security_kit:7.0.4.29:*:*:*:*:*:*:*

OR cpe:/a:ibm:global_security_kit:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:global_security_kit:8.0.13:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_directory_server:-:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_directory_server:-:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*

AND

cpe:/a:ibm:websphere_mq:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_netcool/omnibus:7.3.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:6.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:6.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:6.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:6.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.5.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.1.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.1.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.10:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.11:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_netcool/omnibus:7.3.1.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_netcool/omnibus:7.4.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.10:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.5.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.1.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:license_metric_tool:7.2.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:license_metric_tool:7.5:*:*:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:7.0:*:web:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.1.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.10:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.11:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:7.1.2.12:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:7.1.2.12:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_directory_server:6.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_directory_server:6.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_directory_server:6.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_directory_server:6.3.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.1.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.5.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearcase:8.0.0.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:7.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.0.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_clearquest:8.0.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_netcool/omnibus:1.0.0.0:*:*:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager_firmware:7.0:*:web:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager_fastback:3.5.604:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_mq:7.0.1.11:*:*:*:*:*:*:*

Denotes that component is vulnerable