PT-2015-5519

Name of the Vulnerable Software and Affected Versions IBM Tivoli Security Directory Server versions 6.0 through 6.0 before iFix 75 IBM Tivoli Security Directory Server versions 6.1 through 6.1 before iFix 68 IBM Tivoli Security Directory Server versions 6.2 through 6.2 before iFix 44 IBM Tivoli...

CVE-2015-1959: Improper Access Control

IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly restrict encrypted files, which allows local users to obtain sensitive information or possibly have unspecified other...

CVE-2015-0138

GSKit in IBM Tivoli Directory Server ITDS 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server ISDS 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict T...

Design/Logic Flaw

GSKit in IBM Tivoli Directory Server ITDS 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server ISDS 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict T...

CVE-2015-0138

GSKit in IBM Tivoli Directory Server ITDS 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server ISDS 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict T...

CVE-2015-0138: Undefined Security Weakness

GSKit in IBM Tivoli Directory Server ITDS 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server ISDS 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict T...

PT-2015-4497

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server versions 6.0 through 6.0.0.73-ISS-ITDS-IF0073 IBM Tivoli Directory Server versions 6.1 through 6.1.0.66-ISS-ITDS-IF0066 IBM Tivoli Directory Server versions 6.2 through 6.2.0.42-ISS-ITDS-IF0042 IBM Tivoli Directory...

IBM Security Directory Server < 6.1.0.61 / 6.2.0.36 / 6.3.0.30 / 6.3.1.2 with GSKit < 7.0.4.50 / 8.0.50.20 SSL CPU Utilization DoS

The remote host is running a version of IBM Security Directory Server formerly IBM Tivoli Directory Server and a version of IBM Global Security Kit GSKit that is affected by a denial of service vulnerability due to a flaw in the GSKit library. An attacker can exploit this issue via a...

CVE-2014-6100

Cross-site scripting XSS vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote...

CVE-2014-6100

CVE-2014-6100 is an XSS vulnerability in the Admin UI of IBM Tivoli Directory Server (versions 6.1 via 6.1.0.64-ISS-ITDS-IF0064; 6.2 via 6.2.0.39-ISS-ITDS-FP0039; 6.3 via 6.3.0.33-ISS-ITDS-IF0033) and IBM Security Directory Server 6.3.1 (via 6.3.1.7-ISS-ISDS-IF0007). The root cause is insufficien...

CVE-2014-6100: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote...

多个IBM产品拒绝服务漏洞(CVE-2013-6747)

BUGTRAQ ID: 65156 CVECAN ID: CVE-2013-6747 IBM Global Security Kit GSKit提供了SSL或TLS通讯所需的库和实用程序。 IBM Security Directory Server ISDS及Tivoli Directory Server TDS内使用的IBM GSKit 7.0.4.48之前版本及8.0.50.16之前版本在实现上存在拒绝服务漏洞，远程攻击者通过畸形X.509证书链，利用此漏洞可造成应用崩溃或挂起。 0 IBM GSKit 8.x IBM GSKit 7.x 厂商补丁： IBM ---...

CVE-2013-6747: Improper Input Validation

IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server ISDS and Tivoli Directory Server TDS, allows remote attackers to cause a denial of service application crash or hang via a malformed X.509 certificate chain...

IBM Security Directory Server Installed (credentialed check)

IBM Security Directory Server, formerly known as IBM Tivoli Directory Server, an identity management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58813; scriptversion"1.8";...