Memory Leak Vulnerability in IBM Tivoli Directory Server

CVE-2008-7287

Summary

Multiple memory leak vulnerabilities exist in the ldap_init and ldap_url_search_direct API functions of IBM Tivoli Directory Server prior to version 5.2.0.5-TIV-ITDS-LA0007. Remote authenticated users could exploit these vulnerabilities by initiating numerous function calls, leading to excessive memory consumption and resulting in a denial-of-service condition.

References