Ibm

Tivoli Directory Server

46 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2009-3089

  • EPSS 0.53%
  • Published 08.09.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the admi...

7.5

CVE-2009-3088

  • EPSS 0.65%
  • Published 08.09.2009 18:30:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Pr...

6

CVE-2008-2943

  • EPSS 14.82%
  • Published 30.06.2008 21:41:00
  • Last modified 09.04.2025 00:30:58

Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and possibly execute arbitrary code by using ldapadd to attempt to create a duplic...

5

CVE-2006-0717

Exploit
  • EPSS 12.45%
  • Published 15.02.2006 11:06:00
  • Last modified 03.04.2025 01:03:51

IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite.

5.8

CVE-2005-3567

  • EPSS 0.91%
  • Published 16.11.2005 07:42:00
  • Last modified 03.04.2025 01:03:51

slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.

5

CVE-2004-2526

Exploit
  • EPSS 6.21%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.