CVE-2015-1972

CVE-2015-1972 affects IBM Tivoli/ Security Directory Server; an information-disclosure vulnerability allows a remote attacker to obtain sensitive error-log information by sending a crafted POST request. Impact is confirmed for IBM Tivoli Directory Server versions 6.0 (before iFix 75), 6.1 (before...

CVE-2015-0138

GSKit in IBM Tivoli Directory Server ITDS 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server ISDS 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict T...

Design/Logic Flaw

GSKit in IBM Tivoli Directory Server ITDS 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server ISDS 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict T...

IBM Security Directory Server < 6.1.0.61 / 6.2.0.36 / 6.3.0.30 / 6.3.1.2 with GSKit < 7.0.4.50 / 8.0.50.20 SSL CPU Utilization DoS

The remote host is running a version of IBM Security Directory Server formerly IBM Tivoli Directory Server and a version of IBM Global Security Kit GSKit that is affected by a denial of service vulnerability due to a flaw in the GSKit library. An attacker can exploit this issue via a...

CVE-2014-6100

Cross-site scripting XSS vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote...

CVE-2014-6100

CVE-2014-6100 is an XSS vulnerability in the Admin UI of IBM Tivoli Directory Server (versions 6.1 via 6.1.0.64-ISS-ITDS-IF0064; 6.2 via 6.2.0.39-ISS-ITDS-FP0039; 6.3 via 6.3.0.33-ISS-ITDS-IF0033) and IBM Security Directory Server 6.3.1 (via 6.3.1.7-ISS-ISDS-IF0007). The root cause is insufficien...

多个IBM产品拒绝服务漏洞(CVE-2013-6747)

BUGTRAQ ID: 65156 CVECAN ID: CVE-2013-6747 IBM Global Security Kit GSKit提供了SSL或TLS通讯所需的库和实用程序。 IBM Security Directory Server ISDS及Tivoli Directory Server TDS内使用的IBM GSKit 7.0.4.48之前版本及8.0.50.16之前版本在实现上存在拒绝服务漏洞，远程攻击者通过畸形X.509证书链，利用此漏洞可造成应用崩溃或挂起。 0 IBM GSKit 8.x IBM GSKit 7.x 厂商补丁： IBM ---...

IBM Security Directory Server Installed (credentialed check)

IBM Security Directory Server, formerly known as IBM Tivoli Directory Server, an identity management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58813; scriptversion"1.8";...