IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.

The version of IBM Tivoli Storage Manager installed on the remote host is 6.3.x prior to 6.3.4.0. It is, therefore, affected by a vulnerability that could allow a remote attacker to cause a denial of service via specially crafted values in the TLS Record Layer.

The version of IBM Tivoli Storage Manager installed on the remote host is 6.2.x prior to 6.2.6.0. It is, therefore, potentially affected by multiple flaws in its bundled SSL library:

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted 'ClientHello'     message. (CVE-2012-2190).

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted value in     the TLS Record Layer. (CVE-2012-2191).

  - A flaw that could allow a remote attacker to perform a     statistical timing attack known as 'Lucky Thirteen'.
    (CVE-2013-0169).

The version of IBM Tivoli Storage Manager installed on the remote host is 6.1 running on Windows or AIX. It is, therefore, potentially affected by multiple flaws in its bundled SSL library:

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted 'ClientHello'     message. (CVE-2012-2190).

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted value in     the TLS Record Layer. (CVE-2012-2191).

  - A flaw that could allow a remote attacker to perform a     statistical timing attack known as 'Lucky Thirteen'.
    (CVE-2013-0169).

The version of IBM Tivoli Storage Manager installed on the remote host is 5.5 running on Windows or AIX. It is, therefore, potentially affected by multiple flaws in its bundled SSL library:

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted 'ClientHello'     message. (CVE-2012-2190).

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted value in     the TLS Record Layer. (CVE-2012-2191).

  - A flaw that could allow a remote attacker to perform a     statistical timing attack known as 'Lucky Thirteen'.
    (CVE-2013-0169).

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by one or more of the following vulnerabilities :

  - The included software, GSKit, contains several errors     related to SSL and TLS that can result in denial of     service, information disclosures, or unauthorized     insertion of an arbitrary root Certification Authority     certificate. (CVE-2012-2190, CVE-2012-2191,     CVE-2012-2203, CVE-2013-0169 / IC90395)

  - A stack-based buffer overflow exists related to     'db2aud' and 'db2flacc' that allows a local attacker     to elevate privileges to that of an instance owner. The     'db2aud' issue does not affect installs on the Windows     operating system. (CVE-2013-3475 / IC92495)

  - An unspecified error exists that allows an attacker to     gain SELECT, INSERT, UPDATE, or DELETE permissions to     database tables. Note that successful exploitation     requires the rights EXPLAIN, SQLADM, or DBADM.
    (CVE-2013-4033 / IC94523)

  - An error exists related to the XSLT parser that allows     a NULL pointer to be dereferenced. (CVE-2013-5466 /     IC97470)

  - An error exists related to queries containing OLAP     specifications that allows remote, authenticated     attackers to close database connections and deactivate     the database. (CVE-2013-6717 / IC95641)

The version of IBM WebSphere MQ server is version 7.1 without Fix Pack 7.1.0.2 or 7.5 without Fix Pack 7.5.0.1. It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly validate data when the 'protection     mechanism' is executed against an SSL CBC timing attack.
    A remote attacker, using crafted values in the TLS Record     Layer, can exploit this to cause a denial of service.
    (CVE-2012-2191)

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly verify certificates, which can allow     a remote attacker to conduct a man-in-the-middle attack.
    (CVE-2012-2203)

  - An application can potentially put a sequence of large     messages into the queue, causing a buffer to overflow in     the queue manager. This can lead to a denial of service.
    (CVE-2012-4863)

The version of IBM WebSphere MQ server is version 7.0 without Fix Pack 7.0.1.9, 7.1 without Fix Pack 7.1.0.2 or 7.5 without Fix Pack 7.5.0.1. It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly validate data when the 'protection     mechanism' is executed against an SSL CBC timing attack.
    A remote attacker, using crafted values in the TLS Record     Layer, can exploit this to cause a denial of service.
    (CVE-2012-2191)

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly verify certificates, which can allow     a remote attacker to conduct a man-in-the-middle attack.
    (CVE-2012-2203)

IBM WebSphere Application Server 8.5 before Fix Pack 1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities :

  - An input validation error exists related to the 'Eclipse     Help System' that can allow arbitrary redirect responses     to HTTP requests. (CVE-2012-2159, PM66410)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)  
  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296) 

  - A request validation error exists related to the proxy     server component that can allow a remote attacker to     cause the proxy status to be reported as disabled thus     denying applications access to the proxy.
    (CVE-2012-3330, PM71319)

  - A request validation error exists related to the     'Liberty Profile' and 'JAX-RS' that can allow a remote     attacker to elevate privileges. (CVE-2012-4850, PM67082)

  - A user-supplied input validation error exists related     to the 'Liberty Profile' that can allow cross-site     scripting attacks to be carried out. (CVE-2012-4851,     PM68643)

  - A user-supplied input validation error exists that can     allow cross-site request forgery (CSRF) attacks to be     carried out. (CVE-2012-4853, PM62920)

IBM WebSphere Application Server 7.0 before Fix Pack 25 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - An error exists related to 'Application Snoop Servlet'     and missing access controls. This error can allow     sensitive information to be disclosed. Note that     exploiting this issue requires that the default     'Application Snoop Servlet' be installed and running.
    (CVE-2012-2170, PM56183)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

IBM WebSphere Application Server 8.0 before Fix Pack 4 appears to be running on the remote host and is potentially affected by the following vulnerabilities :

  - An input validation error exists related to the 'Eclipse     Help System' that can allow arbitrary redirect responses     to HTTP requests. (CVE-2012-2159, CVE-2012-2161,     PM62795)

  - An error exists related to 'Application Snoop Servlet'     and missing access controls. This error can allow     sensitive information to be disclosed. Note that     exploiting this issue requires that the default     'Application Snoop Servlet' be installed and running.
    (CVE-2012-2170, PM56183)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

ID	Name	Product	Family	Severity
77119	IBM Tivoli Storage Manager Server 6.3.x < 6.3.4.0 DoS	Nessus	General	medium
77118	IBM Tivoli Storage Manager Server 6.2.x < 6.2.6.0 Multiple Vulnerabilities	Nessus	General	low
77117	IBM Tivoli Storage Manager Server 6.1.x Multiple Vulnerabilities	Nessus	General	low
77116	IBM Tivoli Storage Manager Server 5.5.x Multiple Vulnerabilities	Nessus	General	low
71519	IBM DB2 9.7 < Fix Pack 9 Multiple Vulnerabilities	Nessus	Databases	critical
63099	IBM WebSphere MQ 7.1 / 7.5 Multiple Vulnerabilities	Nessus	Windows	high
63098	IBM WebSphere MQ 7.0 / 7.1 / 7.5 Global Security Toolkit Vulnerabilities	Nessus	Windows	high
62975	IBM WebSphere Application Server 8.5 < Fix Pack 1 Multiple Vulnerabilities	Nessus	Web Servers	high
62413	IBM WebSphere Application Server 7.0 < Fix Pack 25 Multiple Vulnerabilities	Nessus	Web Servers	medium
62394	IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities	Nessus	Web Servers	medium
61459	IBM WebSphere Application Server 8.0 < Fix Pack 4 Multiple Vulnerabilities	Nessus	Web Servers	medium

Detections

Analytics

CVE-2012-2191

medium

Tenable Plugins

medium

low

low

low

critical

high

high

high

medium

medium

medium