PT-2005-4353 · Ibm · Ibm Tivoli Directory Server

Publicado 2005-11-16 · Atualizado 2017-07-11 · CVE-2005-3567

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server (ITDS) versions 5.2.0 through 6.0.0

Description The issue allows attackers to bypass authentication and modify or delete directory data. This is possible because the slapd daemon in the affected software binds using SASL EXTERNAL.

Recommendations For versions 5.2.0 through 6.0.0, consider restricting access to the slapd daemon until a fix is available. As a temporary workaround, review and limit the use of SASL EXTERNAL bindings to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2005-3567

Produtos afetados

Ibm Tivoli Directory Server

Referências · 13

• http://securityfocus.com/bid/15367 · Correção
• http://www-1.ibm.com/support/docview.wss?uid=swg21222159 · Aviso do Fabricante
• http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22989 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3567 · Nota de Segurança
• http://osvdb.org/20672 · Correção
• http://vupen.com/english/advisories/2005/2356 · Aviso do Fabricante
• http://securitytracker.com/id?1015171 · Correção
• http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247 · Nota
• http://secunia.com/advisories/17484 · Aviso do Fabricante
• http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only · Aviso do Fabricante
• http://kb.cert.org/vuls/id/194753 · Nota
• http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en · Aviso do Fabricante