Denial of Service Vulnerability in IBM Global Security Kit

CVE-2013-6329

Summary

The IBM Global Security Kit (GSKit) is susceptible to a Denial of Service (DoS) attack, where an adversary can exploit the SSLv2 session handshake process. By sending a crafted handshake during the resumption phase of an SSLv2 session, attackers can disrupt service, potentially leading to significant downtime for affected applications. This vulnerability may impact users of Content Manager OnDemand versions 8.5 and 9.0, making it essential for organizations to apply relevant security patches and updates to mitigate the risks associated with this exploit.

References