IBM TXSeries for Multiplatforms CICS Listener Crafted CICSAS eci Response Timeout DoS

high Nessus Plugin ID 35743

Synopsis

The remote Windows host has an application that is affected by an unspecified vulnerability.

Description

The version of IBM TXSeries installed on the remote host reportedly waits for a 'forcepurge' acknowledgement from a CICS Application Server after an 'eci' response timeout. A remote, authenticated attacker may be able to leverage this issue to cause a denial of service or have some other unspecified impact.

Solution

Apply the recommended Interim Fix.

Plugin Details

Severity: High

ID: 35743

File Name: txseries_6_2_if7.nasl

Version: 1.13

Type: local

Agent: windows

Family: Windows

Published: 2/27/2009

Updated: 8/1/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2009-0505

BID: 33883

Detections

Analytics