CVE-2007-6742

The getfilterlist function in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service infinite loop via a malformed search filter...

CVE-2007-6743

Double free vulnerability in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause a denial of service ABEND via search operations that trigger recursive filterfree calls...

CVE-2008-7288

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

CVE-2009-5072

Memory leak in the ldapexplodedn function in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.61 aka 6.0.0.8-TIV-ITDS-IF0003 allows remote authenticated users to cause a denial of service memory consumption via an empty string argument...

CVE-2010-4787

The vulnerability CVE-2010-4787 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005). A remote authenticated user can trigger a denial of service (daemon hang) via a paged search that triggers improper mutex processing. The available records confirm the affe...

CVE-2007-6743

The vulnerability CVE-2007-6743 affects IBM Tivoli Directory Server (TDS) 5.2 prior to 5.2.0.5-TIV-ITDS-LA0005. It is a double free bug triggered by search operations that cause recursive filter_free calls, allowing remote authenticated users to cause a denial of service (ABEND). No further explo...

CVE-2010-4785

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service ABEND via a malformed LDAP extended operation that triggers certain comparisons...

CVE-2010-4789

The CVE-2010-4789 issue is a use-after-free in the proxy-server component of IBM Tivoli Directory Server (TDS). Affected versions are TDS 6.0 prior to 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 prior to 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001). The vulnerability allows remote authenticated users...

CVE-2011-1206

CVE-2011-1206 concerns a stack-based buffer overflow in ibmslapd.exe (IBM Tivoli Directory Server) triggered by processing crafted LDAP requests. Affected releases include TDS 5.2 prior to 5.2.0.5-TIV-ITDS-IF0010, 6.0 prior to 6.0.0.67 (6.0.0.8-TIV-ITDS-IF0009), 6.1 prior to 6.1.0.40 (6.1.0.5-TIV...

CVE-2011-1206

Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 befor...

CVE-2008-7287

Multiple memory leaks in the 1 ldapinit and 2 ldapurlsearchdirect API functions in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service memory consumption by making many function calls...

CVE-2009-5073

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.59 aka 6.0.0.8-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service infinite loop and daemon hang by adding a nested group that contains the Distinguished Name DN of its parent entry...

CVE-2008-7287

The vulnerability CVE-2008-7287 affects IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007. It involves memory leaks in the ldap_init and ldap_url_search_direct API functions, allowing remote authenticated users to exhaust memory and cause a denial of service. No exploit details...

CVE-2008-7290

The CVE-2008-7290 entry documents a memory leak in the ldap_explode_rdn API of IBM Tivoli Directory Server (TDS) 5.2, before version 5.2.0.5-TIV-ITDS-LA0007. The issue allows remote authenticated users to cause a denial of service via repeated function calls, consuming memory. The connected sourc...

CVE-2009-5073

CVE-2009-5073 affects IBM Tivoli Directory Server (TDS) 6.0 prior to 6.0.0.59 (6.0.0.8-TIV-ITDS-IF0001). A remote authenticated user can trigger a denial-of-service by adding a nested group that includes the DN of its parent entry, causing an infinite loop and daemon hang. Impact is a partial ava...

CVE-2008-7289

CVE-2008-7289 affects IBM Tivoli Directory Server (TDS) 5.2, before 5.2.0.5-TIV-ITDS-LA0007. The issue arises when multiple passwords are changed simultaneously, allowing a remote authenticated user to trigger updates to a DB2 password-history table and cause a denial of service (DB2 daemon deadl...

CVE-2010-4787

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

CVE-2010-4788

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service daemon crash via a paged search...

CVE-2011-1822

The LDAPADD implementation in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log...

CVE-2010-4785

The vulnerability CVE-2010-4785 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (6.0.0.8-TIV-ITDS-IF0004). The do_extendedOp function in ibmslapd on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended opera...