Security Bulletin: IBM Tivoli Directory Server use of NULL ciphers in default Transport Layer Security configuration would result in unencrypted communications (CVE-2012-0726)

Abstract IBM Tivoli Directory Server TDS enables NULL-MD5 and NULL-SHA ciphers in the default Transport Layer Security TLS configuration. Use of either of these ciphers would result in unencrypted communications. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-0726 DESCRIPTION: In the default TDS...

IBM Tivoli Directory Server TLS NULL Cipher (uncredentialed check)

The IBM Tivoli Directory Server hosted on the remote host supports TLS NULL-MD5 or NULLSHA ciphers. This allows remote, unauthenticated attackers to trigger unencrypted communication via the TLS handshake protocol. Note that this version of Directory Server likely has other vulnerabilities i.e.,...

CVE-2012-0726: Undefined Security Weakness

The default configuration of TLS in IBM Tivoli Directory Server TDS 6.3 and earlier supports the 1 NULL-MD5 and 2 NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol...