Security Bulletin: IBM Tivoli Directory Server use of NULL ciphers in default Transport Layer Security configuration would result in unencrypted communications (CVE-2012-0726)

Abstract IBM Tivoli Directory Server TDS enables NULL-MD5 and NULL-SHA ciphers in the default Transport Layer Security TLS configuration. Use of either of these ciphers would result in unencrypted communications. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-0726 DESCRIPTION: In the default TDS...

CVE-2012-0726

CVE-2012-0726 affects IBM Tivoli Directory Server (TDS) 6.3 and earlier. The default TLS configuration enables NULL-MD5 and NULL-SHA ciphers, which can lead to unencrypted communications during the TLS handshake. IBM’s bulletin provides vendor fixes: 6.1.0.47-ISS-ITDS-IF0047 (for 6.1), 6.2.0.22-I...