CVE-2013-2960
Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations…
Does this matter?
Lower severity and a low EPSS score (2.56%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.56% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- ibm/tivoli monitoring · ibm/application manager for smart business
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116
- http://www-01.ibm.com/support/docview.wss?uid=swg21635080
- http://www-01.ibm.com/support/docview.wss?uid=swg21640752Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83724
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116
- http://www-01.ibm.com/support/docview.wss?uid=swg21635080
- http://www-01.ibm.com/support/docview.wss?uid=swg21640752Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83724
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.