CVE-2008-7287

The vulnerability CVE-2008-7287 affects IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007. It involves memory leaks in the ldap_init and ldap_url_search_direct API functions, allowing remote authenticated users to exhaust memory and cause a denial of service. No exploit details...

CVE-2010-4785

The vulnerability CVE-2010-4785 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). The do_extendedOp function in ibmslapd on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended opera...

CVE-2007-6742

The vulnerability CVE-2007-6742 affects IBM Tivoli Directory Server (TDS) 5.2 and earlier, where get_filter_list fails to correctly parse certain sub filters. This can allow remote authenticated users to trigger an infinite loop, resulting in a denial of service. Affected component: the get_filte...

CVE-2008-7289

CVE-2008-7289 affects IBM Tivoli Directory Server (TDS) 5.2, before 5.2.0.5-TIV-ITDS-LA0007. The issue arises when multiple passwords are changed simultaneously, allowing a remote authenticated user to trigger updates to a DB2 password-history table and cause a denial of service (DB2 daemon deadl...

CVE-2009-5073

CVE-2009-5073 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.59 (6.0.0.8-TIV-ITDS-IF0001). A remote authenticated user can trigger a denial-of-service by adding a nested group that includes the DN of its parent entry, causing an infinite loop and daemon hang. Impact is a partial ava...

CVE-2011-1820

CVE-2011-1820 affects IBM Tivoli Directory Server (TDS) versions listed in the NVD entry (5.2 pre-5.2.0.5…, 6.0 pre-6.0.0.67, 6.1 pre-6.1.0.40, 6.2 pre-6.2.0.16, 6.3 pre-6.3.0.3). The vulnerability stems from improper handling of the ibm-auditAttributesOnGroupEvalOp logging setting for auditing o...

CVE-2010-4788

Affected: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). Root cause: insufficient locking of linked-list access during paged search. Impact: remote authenticated users can cause a denial of service (daemon crash). Remediation details are not provided in the conne...

CVE-2011-1821

IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search. This CVE’s impact is a partial availability denial; exploit details or mitigations are not provided in the suppli...

CVE-2011-1822

The CVE concerns IBM Tivoli Directory Server (TDS) 5.2.x (up to 5.2.0.5-TIV-ITDS-IF0009). The change log records a cleartext SHA password, exposing sensitive credentials to local read access. Affected component is LDAP_ADD, and the underlying issue is storing passwords in logs. The impact is that...

CVE-2010-4786

CVE-2010-4786 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.63 (6.0.0.8‑TIV‑ITDS‑IF0005). The issue enables a remote authenticated user to cause a denial of service (daemon crash or hang) by performing a paged search, related to an improper ibm-slapdIdleTimeOut configuration. The d...

CVE-2008-7288

CVE-2008-7288 affects IBM Tivoli Directory Server (TDS) 5.2 on AIX prior to 5.2.0.5-TIV-ITDS-LA0007. The issue allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation. The description in connected sources confirms the affected ...

CVE-2010-4787: Undefined Security Weakness

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

CVE-2011-1820: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 before 6.3.0.3 aka 6.3.0.0-TIV-ITDS-IF0003 does not properly handle the...

CVE-2008-7288: Undefined Security Weakness

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

CVE-2008-7289: Improper Input Validation

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service DB2 daemon deadlock by making password changes that trigger updates to a D...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Server Detection (LDAP)

LDAP based detection of IBM Tivoli Directory Server. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft SQL Server Detection (TDS)

Binary data 5551.prm...

Microsoft SQL client Detection (TDS)

Binary data 5550.prm...

CVE-2010-0312

CVE-2010-0312 affects IBM Tivoli Directory Server 6.2 on Linux; the vulnerability is in the do_extendedOp function of ibmslapd, where a crafted SecureWay 3.2 Event Registration Request (1.3.18.0.2.12.1) can trigger a NULL pointer dereference and daemon crash, resulting in a denial of service. Red...