Ibm

Tivoli Directory Server

46 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2013-6747

  • EPSS 2.77%
  • Published 27.01.2014 16:55:04
  • Last modified 11.04.2025 00:51:21

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certific...

7.5

CVE-2012-2203

  • EPSS 0.96%
  • Published 08.08.2012 10:26:18
  • Last modified 11.04.2025 00:51:21

IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it ea...

5

CVE-2012-2191

  • EPSS 3.22%
  • Published 08.08.2012 10:26:18
  • Last modified 11.04.2025 00:51:21

IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC t...

5

CVE-2012-0743

  • EPSS 1.34%
  • Published 22.04.2012 18:55:03
  • Last modified 11.04.2025 00:51:21

IBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via a malformed LDAP paged search request.

4.3

CVE-2012-0740

  • EPSS 0.48%
  • Published 22.04.2012 18:55:03
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.4

CVE-2012-0726

  • EPSS 0.52%
  • Published 22.04.2012 18:55:03
  • Last modified 11.04.2025 00:51:21

The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

5

CVE-2011-2759

  • EPSS 0.25%
  • Published 17.07.2011 20:55:02
  • Last modified 11.04.2025 00:51:21

The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to ob...

5

CVE-2011-2758

  • EPSS 0.34%
  • Published 17.07.2011 20:55:02
  • Last modified 11.04.2025 00:51:21

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a ...

2.1

CVE-2011-1822

  • EPSS 0.05%
  • Published 21.04.2011 10:55:02
  • Last modified 11.04.2025 00:51:21

The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log.

4

CVE-2011-1821

  • EPSS 0.36%
  • Published 21.04.2011 10:55:02
  • Last modified 11.04.2025 00:51:21

IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search.