CVE-2008-2122

IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/30081	Broken Link Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21303877	Broken Link
http://www.securityfocus.com/bid/29036	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1019964	Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/1427/references	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/42173	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:rational_build_forge:7.0.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-05-09 15:20

Updated : 2024-02-09 02:54

NVD link : CVE-2008-2122

Mitre link : CVE-2008-2122

CVE.ORG link : CVE-2008-2122

JSON object : View

Products Affected

ibm

rational_build_forge

CWE

CWE-772

Missing Release of Resource after Effective Lifetime

{"id": "CVE-2008-2122", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2008-05-09T15:20:00.000", "references": [{"url": "http://secunia.com/advisories/30081", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg21303877", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/29036", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019964", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1427/references", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42173", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-772"}]}], "descriptions": [{"lang": "en", "value": "IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets."}, {"lang": "es", "value": "IBM Rational Build Forge versi\u00f3n 7.0.2, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (consumo excesivo de CPU) mediante el rastreo de puertos, lo que genera m\u00faltiples procesos bfagent en el servidor que intentan leer datos de los conectores (sockets) cerrados."}], "lastModified": "2024-02-09T02:54:11.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:rational_build_forge:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DE48B74-8CC2-4D5C-8D5B-A6011DA0FE75"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}