Lucene search
HistoryApr 21, 2011 - 10:55 a.m.
CVE-2008-7289
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.002
Percentile
61.0%
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service (DB2 daemon deadlock) by making password changes that trigger updates to a DB2 password-history table.
Affected configurations
Node
ibmtivoli_directory_serverMatch5.2.0
ORibmtivoli_directory_serverMatch5.2.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | tivoli_directory_server | 5.2.0 | cpe:2.3:a:ibm:tivoli_directory_server:5.2.0:*:*:*:*:*:*:* |
| ibm | tivoli_directory_server | 5.2.0.4 | cpe:2.3:a:ibm:tivoli_directory_server:5.2.0.4:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-7289
2011-04-21 10:00:00
cve
cve
CVE-2008-7289
2011-04-21 10:55:01
prion
prion
Default credentials
2011-04-21 10:55:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.002
Percentile
61.0%
Related for NVD:CVE-2008-7289