PT-2008-3637 · Ibm · Ibm Rational Build Forge

Published 2008-05-09 · Updated 2024-02-09 · CVE-2008-2122

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM Rational Build Forge version 7.0.2

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption. This is achieved via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets.

Recommendations For IBM Rational Build Forge version 7.0.2, consider restricting access to the bfagent server processes to minimize the risk of exploitation. As a temporary workaround, limit the number of concurrent connections to prevent excessive CPU consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2008-2122

Affected Products

Ibm Rational Build Forge

References · 8

• http://secunia.com/advisories/30081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2122 · Security Note
• http://securityfocus.com/bid/29036 · Note
• http://securitytracker.com/id?1019964 · Note
• http://vupen.com/english/advisories/2008/1427/references · Note
• http://www-1.ibm.com/support/docview.wss?uid=swg21303877 · Note
• https://t.me/cvenotify/70742 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42173 · Note