CVE-2013-6747

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.

• CWE-20

• http://osvdb.org/102556
• http://secunia.com/advisories/56698
• http://secunia.com/advisories/56699
• http://www-01.ibm.com/support/docview.wss?uid=swg21662902Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21669554Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21676091Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21676092Vendor Advisory
• http://www.securitytracker.com/id/1029687
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89863
• http://osvdb.org/102556
• http://secunia.com/advisories/56698
• http://secunia.com/advisories/56699
• http://www-01.ibm.com/support/docview.wss?uid=swg21662902Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21669554Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21676091Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21676092Vendor Advisory
• http://www.securitytracker.com/id/1029687
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89863

Published

Jan 27, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6741IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.2014031…
• CVE-2013-6742The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and…
• CVE-2013-6743Cross-site scripting (XSS) vulnerability in the Meeting Serv…
• CVE-2013-6744The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 befo…
• CVE-2013-6745Cross-site scripting (XSS) vulnerability in the IMS server b…
• CVE-2013-6746Cross-site scripting (XSS) vulnerability in FileNet P8 Platf…
• CVE-2013-6748Buffer overflow in the ActiveX control in qp2.cab in IBM Lot…
• CVE-2013-6749Buffer overflow in the ActiveX control in qp2.cab in IBM Lot…
• CVE-2013-6751Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6752Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6753Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6754Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…