Lucene search

K
cve[email protected]CVE-2010-4786
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4786

2022-10-0316:21:06
CWE-399
web.nvd.nist.gov
22
ibm tivoli directory server
tds 6.0
cve-2010-4786
nvd
remote authentication
denial of service

6.3 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.8%

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon crash or hang) via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration setting.

Affected configurations

NVD
Node
ibmtivoli_directory_serverMatch6.0
OR
ibmtivoli_directory_serverMatch6.0.0.0
OR
ibmtivoli_directory_serverMatch6.0.0.1
OR
ibmtivoli_directory_serverMatch6.0.0.7
OR
ibmtivoli_directory_serverMatch6.0.0.8
OR
ibmtivoli_directory_serverMatch6.0.0.14
OR
ibmtivoli_directory_serverMatch6.0.0.19
OR
ibmtivoli_directory_serverMatch6.0.0.33
OR
ibmtivoli_directory_serverMatch6.0.0.41
OR
ibmtivoli_directory_serverMatch6.0.0.45
OR
ibmtivoli_directory_serverMatch6.0.0.52
OR
ibmtivoli_directory_serverMatch6.0.0.53
OR
ibmtivoli_directory_serverMatch6.0.0.54
OR
ibmtivoli_directory_serverMatch6.0.0.55
OR
ibmtivoli_directory_serverMatch6.0.0.56
OR
ibmtivoli_directory_serverMatch6.0.0.57
OR
ibmtivoli_directory_serverMatch6.0.0.58
OR
ibmtivoli_directory_serverMatch6.0.0.59
OR
ibmtivoli_directory_serverMatch6.0.0.60
OR
ibmtivoli_directory_serverMatch6.0.0.61
OR
ibmtivoli_directory_serverMatch6.0.0.62

6.3 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.8%

Related for CVE-2010-4786