PT-2015-4497 · Ibm+2 · Ibm Security Directory Server+4

Karthikeyan Bhargavan · Published 2015-03-25 · Updated 2017-01-03 · CVE-2015-0138

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server versions 6.0 through 6.0.0.73-ISS-ITDS-IF0073 IBM Tivoli Directory Server versions 6.1 through 6.1.0.66-ISS-ITDS-IF0066 IBM Tivoli Directory Server versions 6.2 through 6.2.0.42-ISS-ITDS-IF0042 IBM Tivoli Directory Server versions 6.3 through 6.3.0.35-ISS-ITDS-IF0035 IBM Security Directory Server versions 6.3.1 through 6.3.1.9-ISS-ISDS-IF0009

Description The issue makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT RSA ciphers via crafted TLS traffic, related to the "FREAK" issue. This could allow a remote attacker using man-in-the-middle techniques to facilitate bruteforce decryption of TLS/SSL traffic between vulnerable clients and servers.

Recommendations For IBM Tivoli Directory Server versions 6.0 through 6.0.0.73-ISS-ITDS-IF0073, update to version 6.0.0.73-ISS-ITDS-IF0073 or later. For IBM Tivoli Directory Server versions 6.1 through 6.1.0.66-ISS-ITDS-IF0066, update to version 6.1.0.66-ISS-ITDS-IF0066 or later. For IBM Tivoli Directory Server versions 6.2 through 6.2.0.42-ISS-ITDS-IF0042, update to version 6.2.0.42-ISS-ITDS-IF0042 or later. For IBM Tivoli Directory Server versions 6.3 through 6.3.0.35-ISS-ITDS-IF0035, update to version 6.3.0.35-ISS-ITDS-IF0035 or later. For IBM Security Directory Server versions 6.3.1 through 6.3.1.9-ISS-ISDS-IF0009, update to version 6.3.1.9-ISS-ISDS-IF0009 or later.

Exploit

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2015-0138

RHSA-2015:1006

RHSA-2015:1007

RHSA-2015:1020

RHSA-2015:1021

RHSA-2015:1091

RHSA-2015_1006

RHSA-2015_1020

RHSA-2015_1021

SUSE-SU-2015:1073-1

SUSE-SU-2015:1161-1

SUSE-SU-2015_1073-1

SUSE-SU-2015_1086-4

Affected Products

Ibm Aix

Ibm Security Directory Server

Ibm Tivoli Directory Server

Red Hat

Suse

References · 113

• 🔥 https://github.com/AbhishekGhosh/FREAK-Attack-CVE-2015-0204-Testing-Script · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204 · Security Note
• https://bdu.fstec.ru/vul/2015-09905 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0138 · Security Note
• https://bdu.fstec.ru/vul/2015-09144 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0192 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21698703 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21883640 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09963 · Security Note
• https://bdu.fstec.ru/vul/2015-09948 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1007.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06128 · Security Note