Memory Leak Vulnerability in IBM Tivoli Directory Server
CVE-2009-5072

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Directory Server
Vendor
CVE Published:
21 April 2011

Summary

A vulnerability in the ldap_explode_dn function of IBM Tivoli Directory Server version 6.0 prior to 6.0.0.61 permits remote authenticated users to exploit a memory leak. By providing an empty string as an argument, they can induce excessive memory consumption, potentially leading to a denial of service. This flaw necessitates immediate attention by affected users to mitigate potential service disruption.

References

http://www.ibm.com/support/docview.wss?uid=swg1IO11407
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029672
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.