CVE-2008-7287

Multiple memory leaks in the 1 ldapinit and 2 ldapurlsearchdirect API functions in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service memory consumption by making many function calls...

CVE-2010-4785

The vulnerability CVE-2010-4785 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). The do_extendedOp function in ibmslapd on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended opera...

CVE-2011-1820

CVE-2011-1820 affects IBM Tivoli Directory Server (TDS) versions listed in the NVD entry (5.2 pre-5.2.0.5…, 6.0 pre-6.0.0.67, 6.1 pre-6.1.0.40, 6.2 pre-6.2.0.16, 6.3 pre-6.3.0.3). The vulnerability stems from improper handling of the ibm-auditAttributesOnGroupEvalOp logging setting for auditing o...

CVE-2007-6742

The vulnerability CVE-2007-6742 affects IBM Tivoli Directory Server (TDS) 5.2 and earlier, where get_filter_list fails to correctly parse certain sub filters. This can allow remote authenticated users to trigger an infinite loop, resulting in a denial of service. Affected component: the get_filte...

CVE-2009-5072

CVE-2009-5072 affects IBM Tivoli Directory Server 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003). A memory leak in ldap_explode_dn triggered by an empty string argument allows remote authenticated users to cause a denial of service via memory consumption. No remediation details are provided in...

CVE-2008-7287

The vulnerability CVE-2008-7287 affects IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007. It involves memory leaks in the ldap_init and ldap_url_search_direct API functions, allowing remote authenticated users to exhaust memory and cause a denial of service. No exploit details...

CVE-2007-6742

The getfilterlist function in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service infinite loop via a malformed search filter...

CVE-2010-4787

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

CVE-2010-4785

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service ABEND via a malformed LDAP extended operation that triggers certain comparisons...

CVE-2010-4786

CVE-2010-4786 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.63 (6.0.0.8‑TIV‑ITDS‑IF0005). The issue enables a remote authenticated user to cause a denial of service (daemon crash or hang) by performing a paged search, related to an improper ibm-slapdIdleTimeOut configuration. The d...

CVE-2008-7289

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service DB2 daemon deadlock by making password changes that trigger updates to a D...

CVE-2011-1206

CVE-2011-1206 concerns a stack-based buffer overflow in ibmslapd.exe (IBM Tivoli Directory Server) triggered by processing crafted LDAP requests. Affected releases include TDS 5.2 prior to 5.2.0.5-TIV-ITDS-IF0010, 6.0 prior to 6.0.0.67 (6.0.0.8-TIV-ITDS-IF0009), 6.1 prior to 6.1.0.40 (6.1.0.5-TIV...

CVE-2011-1822

The CVE concerns IBM Tivoli Directory Server (TDS) 5.2.x (up to 5.2.0.5-TIV-ITDS-IF0009). The change log records a cleartext SHA password, exposing sensitive credentials to local read access. Affected component is LDAP_ADD, and the underlying issue is storing passwords in logs. The impact is that...

CVE-2007-6743

The vulnerability CVE-2007-6743 affects IBM Tivoli Directory Server (TDS) 5.2 prior to 5.2.0.5-TIV-ITDS-LA0005. It is a double free bug triggered by search operations that cause recursive filter_free calls, allowing remote authenticated users to cause a denial of service (ABEND). No further explo...

CVE-2010-4788

Affected: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). Root cause: insufficient locking of linked-list access during paged search. Impact: remote authenticated users can cause a denial of service (daemon crash). Remediation details are not provided in the conne...

CVE-2011-1821

IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search. This CVE’s impact is a partial availability denial; exploit details or mitigations are not provided in the suppli...

CVE-2008-7288

CVE-2008-7288 affects IBM Tivoli Directory Server (TDS) 5.2 on AIX prior to 5.2.0.5-TIV-ITDS-LA0007. The issue allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation. The description in connected sources confirms the affected ...

CVE-2010-4787

The vulnerability CVE-2010-4787 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005). A remote authenticated user can trigger a denial of service (daemon hang) via a paged search that triggers improper mutex processing. The available records confirm the affe...

CVE-2008-7289

CVE-2008-7289 affects IBM Tivoli Directory Server (TDS) 5.2, before 5.2.0.5-TIV-ITDS-LA0007. The issue arises when multiple passwords are changed simultaneously, allowing a remote authenticated user to trigger updates to a DB2 password-history table and cause a denial of service (DB2 daemon deadl...

CVE-2010-4789

Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.65 aka 6.0.0.8-TIV-ITDS-IF0007 and 6.3 before 6.3.0.1 aka 6.3.0.0-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service daemon crash via a paged search that...