Multiple IBM Products CVE-2013-6747 Denial of Service Vulnerability

Bugtraq ID:	65156
Class:	Design Error
CVE:	CVE-2013-6747
Remote:	Yes
Local:	No
Published:	Jan 24 2014 12:00AM
Updated:	Oct 08 2014 02:03PM
Credit:	IBM
Vulnerable:	IBM Websphere Portal 6.1 IBM WebSphere MQ 7.0 IBM Websphere Application Server 8.0 IBM Tivoli Storage Manager Fastback 5.5.2 IBM Tivoli Storage Manager Fastback 5.5.1 IBM Tivoli Storage Manager Fastback 5.5 IBM Tivoli Storage Manager Fastback 6.1.1.0 IBM Tivoli Storage Manager Fastback 6.1.0.0 IBM Tivoli Storage Manager Fastback 5.5.6.0 IBM Tivoli Storage Manager Fastback 5.5.5.0 IBM Tivoli Storage Manager Fastback 5.5.4.0 IBM Tivoli Storage Manager Fastback 5.5.3.0 IBM Tivoli Storage Manager Fastback 5.5.2.0 IBM Tivoli Storage Manager Fastback 3.5.804 IBM Tivoli Storage Manager Fastback 3.5.802 IBM Tivoli Storage Manager Fastback 3.5.801 IBM Tivoli Storage Manager Fastback 3.5.705 IBM Tivoli Storage Manager Fastback 3.5.604 IBM Tivoli Netcool/OMNIbus 7.3 IBM Tivoli Monitoring 6.2.3 IBM Tivoli Monitoring 6.2.2 IBM Tivoli Monitoring 6.2.1 IBM Tivoli Directory Server 6.3 IBM Tivoli Directory Server 6.2 IBM Tivoli Directory Server 6.1 IBM Rational ClearQuest 7.1.1 02 IBM Rational ClearQuest 7.1.1 IBM Rational ClearQuest 7.1 2 IBM Rational ClearQuest 8.0.0.2 IBM Rational ClearQuest 8.0.0.1 IBM Rational ClearQuest 7.1.2.6 IBM Rational ClearQuest 7.1.2.2 IBM Rational ClearQuest 7.1.2.1 IBM Rational ClearQuest 7.1.2 IBM Rational ClearQuest 7.1.1.9 IBM Rational ClearQuest 7.1.1.5 IBM Rational ClearQuest 7.1.1.4 IBM Rational ClearQuest 7.1 IBM Rational ClearCase 7.1.2.2 IBM Rational ClearCase 7.1.1.5 IBM Rational ClearCase 7.1.1.4 IBM IBM Rational ClearQuest 8.0 IBM IBM Rational ClearQuest 7.1.2.5 IBM IBM Rational ClearQuest 7.1.1.9 IBM HTTP Server 8.0 IBM HTTP Server 7.0 IBM HTTP Server 6.1.0 IBM DB2 Workgroup Server Edition 9.7 IBM DB2 Workgroup Server Edition 9.5 IBM DB2 Express Edition 9.7 IBM DB2 Express Edition 9.5 IBM DB2 Enterprise Server Edition 9.7 IBM DB2 Enterprise Server Edition 9.5 IBM DB2 Connect Unlimited Edition for System z 9.7 IBM DB2 Connect Unlimited Edition for System z 9.5 IBM DB2 Connect Unlimited Edition for System i 9.7 IBM DB2 Connect Unlimited Edition for System i 9.5 IBM DB2 Connect Enterprise Edition 9.7 IBM DB2 Connect Enterprise Edition 9.5 IBM DB2 Connect 9.7 IBM DB2 Connect 9.5 IBM DB2 Connect 9.1 IBM Content Manager Enterprise Edition 8.4.3 IBM Communications Server for AIX 6.3
Not Vulnerable:

Multiple IBM Products CVE-2013-6747 Denial of Service Vulnerability

Multiple IBM products are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Multiple IBM Products CVE-2013-6747 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of any recent information, please mail us at: [email protected].

Multiple IBM Products CVE-2013-6747 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple IBM Products CVE-2013-6747 Denial of Service Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Tivoli Directory Server (IBM)