Lucene search

[email protected]CVE-2010-4216

HistoryNov 09, 2010 - 9:00 p.m.

CVE-2010-4216

2010-11-0921:00:06

CWE-119

[email protected]

web.nvd.nist.gov

ibm

tivoli

directory server

6.0.0.x

6.0.0.8-tiv-itds-if0007

vulnerability

cve-2010-4216

nvd

security

ldap

denial of service

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.6%

JSON

IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service (daemon crash) via vectors involving a buffer that has a memory address near the maximum possible address.

Affected configurations

NVD

Node

ibmtivoli_directory_serverMatch6.0

ibmtivoli_directory_serverMatch6.0.0.7

ibmtivoli_directory_serverMatch6.0.0.8

CPENameOperatorVersion
ibm:tivoli_directory_serveribm tivoli directory servereq6.0
ibm:tivoli_directory_serveribm tivoli directory servereq6.0.0.7
ibm:tivoli_directory_serveribm tivoli directory servereq6.0.0.8

CPE	Name	Operator	Version
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.0
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.0.0.7
ibm:tivoli_directory_server	ibm tivoli directory server	eq	6.0.0.8

References

secunia.com/advisories/42116

www.ibm.com/support/docview.wss?uid=swg1IO13306

www.securityfocus.com/bid/44604

www.vupen.com/english/advisories/2010/2863

exchange.xforce.ibmcloud.com/vulnerabilities/62977

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.6%

JSON

Related for CVE-2010-4216

prion1 cvelist1 nvd1 openvas2