IBM Multiple Products GSKit Denial of Service Vulnerability - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

IBM Multiple Products GSKit Denial of Service Vulnerability

Secunia Advisory:	SA11783
Release Date:	2004-06-07

Critical:	Moderately critical
Impact:	DoS
Where:	From remote
Solution Status:	Vendor Patch

Software:	IBM HTTP Server 1.x IBM HTTP Server 2.x IBM Tivoli Access Manager for Business Integration 5.x IBM Tivoli Access Manager for e-business 3.x IBM Tivoli Access Manager for e-business 4.x IBM Tivoli Access Manager for e-business 5.x IBM Tivoli Directory Server 4.x IBM Tivoli Directory Server 5.x IBM WebSphere MQ 5.x

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been discovered in various IBM products, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an unspecified error within the IBM Global Security Toolkit (GSKit) during SSL handshakes. This can be exploited via specially crafted SSL records to crash the application or cause a performance degradation. The IBM GSKit is included in the following products: * Access Manager for e-business 3.9 * Access Manager for e-business 4.1 * Access Manager for e-business 5.1 * Access Manager for Business Integration 5.1 * IBM Tivoli Directory Server 4.1 * IBM Tivoli Directory Server 5.1 * IBM HTTP Server 1.3.12.x * IBM HTTP Server 1.3.19.x * IBM HTTP Server 1.3.26.x * IBM HTTP Server 1.3.28.x * IBM HTTP Server 2.0.42.x * IBM HTTP Server 2.0.47.x * Websphere MQ V5.3 Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector. Solution: Fixes are available. See patch matrix at: http://www-1.ibm.com/support/docview.wss?uid=swg21169222 Provided and/or discovered by: Reported by vendor. Original Advisory: http://www-1.ibm.com/support/docview.wss?uid=swg21170854&rs=260



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

26 Related Secunia Security Advisories, displaying 10

1. IBM HTTP Server Multiple Cross-Site Scripting Vulnerabilities

2. IBM HTTP Server mod_imap and mod_status Cross-Site Scripting

3. IBM WebSphere MQ for HP NonStop Missing Authentication

4. IBM WebSphere MQ Queue Manager Security Bypass

5. IBM HTTP Server Multi-Processing Module Denial of Service

6. IBM HTTP Server mod_proxy "date" Denial of Service Vulnerability

7. IBM HTTP Server "mod_status" Cross-Site Scripting

8. IBM HTTP Server Apache mod_rewrite Vulnerability

9. IBM HTTP Server Two Vulnerabilities

10. IBM HTTP Server "Expect" Header Cross-Site Scripting

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Mozilla Firefox Multiple Vulnerabilities

2.	Opera for Windows Unspecified Code Execution

3.	Opera Canvas Functions Information Disclosure

4.	Mozilla Firefox Unspecified Code Execution Vulnerability

5.	PCRE pcre_compile.c Buffer Overflow Vulnerability

6.	GNOME Glib PCRE pcre_compile.c Buffer Overflow Vulnerability

7.	VLC Media Player WAV Processing Integer Overflow

8.	UnixWare ReliantHA Privilege Escalation Vulnerabilities

9.	Novell eDirectory ds.dlm Module Buffer Overflow

10.	Internet Explorer 7 Frame Location Handling Vulnerability