CVE-2013-6329

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-310

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/56058
http://www-01.ibm.com/support/docview.wss?uid=swg21659548
http://www-01.ibm.com/support/docview.wss?uid=swg21659716Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21659837
http://www-01.ibm.com/support/docview.wss?uid=swg21669554Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676091Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676092Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88939
http://secunia.com/advisories/56058
http://www-01.ibm.com/support/docview.wss?uid=swg21659548
http://www-01.ibm.com/support/docview.wss?uid=swg21659716Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21659837
http://www-01.ibm.com/support/docview.wss?uid=swg21669554Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676091Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676092Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88939

Timeline

Published: Dec 17, 2013
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-63303.5IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated use CVE-2013-63316.5SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access CVE-2013-63328.5Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code b CVE-2013-63333.5Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Se CVE-2013-63346.4IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0 CVE-2013-63353.3The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x bef CVE-2013-63364.3The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1 CVE-2013-63374.3Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a CVE-2013-63384.3The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10 CVE-2013-63394.3The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.CVE-2013-63404.3epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the CVE-2013-63417.5SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language paramet