CVE-2013-2960Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Application Manager FOR Smart Business

Severity
5.0MEDIUMNVD
EPSS
2.9%
top 13.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 21
Latest updateMay 17

Description

Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

NVDibm/tivoli_monitoring22 versions+21

🔴Vulnerability Details

2
GHSA
GHSA-jfh2-vxqv-9h7g: Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 62022-05-17
CVEList
CVE-2013-2960: Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 62013-06-21
CVE-2013-2960 — IBM vulnerability | cvebase