CVE-2011-1206

Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 befor...

CVE-2011-1822

The LDAPADD implementation in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log...

CVE-2010-4787

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

CVE-2011-1206

CVE-2011-1206 concerns a stack-based buffer overflow in ibmslapd.exe (IBM Tivoli Directory Server) triggered by processing crafted LDAP requests. Affected releases include TDS 5.2 prior to 5.2.0.5-TIV-ITDS-IF0010, 6.0 prior to 6.0.0.67 (6.0.0.8-TIV-ITDS-IF0009), 6.1 prior to 6.1.0.40 (6.1.0.5-TIV...

CVE-2011-1821

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service daemon hang via a cn=changelog search...

CVE-2011-1820

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 before 6.3.0.3 aka 6.3.0.0-TIV-ITDS-IF0003 does not properly handle the...

CVE-2008-7287

Multiple memory leaks in the 1 ldapinit and 2 ldapurlsearchdirect API functions in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service memory consumption by making many function calls...

CVE-2007-6742

The getfilterlist function in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service infinite loop via a malformed search filter...

CVE-2008-7288

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

CVE-2007-6743

The vulnerability CVE-2007-6743 affects IBM Tivoli Directory Server (TDS) 5.2 prior to 5.2.0.5-TIV-ITDS-LA0005. It is a double free bug triggered by search operations that cause recursive filter_free calls, allowing remote authenticated users to cause a denial of service (ABEND). No further explo...

CVE-2010-4786

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon crash or hang via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration...

CVE-2010-4788

Affected: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). Root cause: insufficient locking of linked-list access during paged search. Impact: remote authenticated users can cause a denial of service (daemon crash). Remediation details are not provided in the conne...

CVE-2007-6742

The vulnerability CVE-2007-6742 affects IBM Tivoli Directory Server (TDS) 5.2 and earlier, where get_filter_list fails to correctly parse certain sub filters. This can allow remote authenticated users to trigger an infinite loop, resulting in a denial of service. Affected component: the get_filte...

CVE-2008-7288

CVE-2008-7288 affects IBM Tivoli Directory Server (TDS) 5.2 on AIX prior to 5.2.0.5-TIV-ITDS-LA0007. The issue allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation. The description in connected sources confirms the affected ...

CVE-2008-7287

The vulnerability CVE-2008-7287 affects IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007. It involves memory leaks in the ldap_init and ldap_url_search_direct API functions, allowing remote authenticated users to exhaust memory and cause a denial of service. No exploit details...

CVE-2010-4787

The vulnerability CVE-2010-4787 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005). A remote authenticated user can trigger a denial of service (daemon hang) via a paged search that triggers improper mutex processing. The available records confirm the affe...

CVE-2008-7289

CVE-2008-7289 affects IBM Tivoli Directory Server (TDS) 5.2, before 5.2.0.5-TIV-ITDS-LA0007. The issue arises when multiple passwords are changed simultaneously, allowing a remote authenticated user to trigger updates to a DB2 password-history table and cause a denial of service (DB2 daemon deadl...

CVE-2010-4785

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service ABEND via a malformed LDAP extended operation that triggers certain comparisons...

CVE-2009-5073

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.59 aka 6.0.0.8-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service infinite loop and daemon hang by adding a nested group that contains the Distinguished Name DN of its parent entry...

CVE-2011-1822

The CVE concerns IBM Tivoli Directory Server (TDS) 5.2.x (up to 5.2.0.5-TIV-ITDS-IF0009). The change log records a cleartext SHA password, exposing sensitive credentials to local read access. Affected component is LDAP_ADD, and the underlying issue is storing passwords in logs. The impact is that...