Code injection

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service daemon hang via a cn=changelog search...

Design/Logic Flaw

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

Code injection

Multiple memory leaks in the 1 ldapinit and 2 ldapurlsearchdirect API functions in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service memory consumption by making many function calls...

Stack overflow

Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 befor...

Design/Logic Flaw

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

Default credentials

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service DB2 daemon deadlock by making password changes that trigger updates to a D...

Design/Logic Flaw

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service ABEND via a malformed LDAP extended operation that triggers certain comparisons...

Crlf injection

The getfilterlist function in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service infinite loop via a malformed search filter...

CVE-2007-6743

Double free vulnerability in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause a denial of service ABEND via search operations that trigger recursive filterfree calls...

CVE-2008-7287

Multiple memory leaks in the 1 ldapinit and 2 ldapurlsearchdirect API functions in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service memory consumption by making many function calls...

CVE-2009-5073

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.59 aka 6.0.0.8-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service infinite loop and daemon hang by adding a nested group that contains the Distinguished Name DN of its parent entry...

Design/Logic Flaw

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 before 6.3.0.3 aka 6.3.0.0-TIV-ITDS-IF0003 does not properly handle the...

Design/Logic Flaw

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.59 aka 6.0.0.8-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service infinite loop and daemon hang by adding a nested group that contains the Distinguished Name DN of its parent entry...

Command injection

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon crash or hang via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration...

Design/Logic Flaw

The LDAPADD implementation in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log...

Code injection

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service daemon crash via a paged search...

Memory corruption

Memory leak in the ldapexploderdn API function in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allows remote authenticated users to cause a denial of service memory consumption by making many function calls...

Memory corruption

Memory leak in the ldapexplodedn function in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.61 aka 6.0.0.8-TIV-ITDS-IF0003 allows remote authenticated users to cause a denial of service memory consumption via an empty string argument...

CVE-2008-7288

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

Design/Logic Flaw

Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.65 aka 6.0.0.8-TIV-ITDS-IF0007 and 6.3 before 6.3.0.1 aka 6.3.0.0-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service daemon crash via a paged search that...