CVE-2010-4789

2022-10-0316:21:06

mitre

www.cve.org

ibm tivoli directory server

use-after-free

remote authenticated users

denial of service

paged search

ldap unbind

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.1%

JSON

Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation.