Denial of Service Vulnerability in IBM Tivoli Directory Server
CVE-2010-4785

Currently unrated

Key Information:

Vendor

IBM
Status
Tivoli Directory Server
Vendor
CVE Published:
21 April 2011

What is CVE-2010-4785?

The do_extendedOp function in IBM Tivoli Directory Server 6.0 and earlier versions allows remote authenticated users to induce a denial of service. This can occur through a malformed LDAP extended operation that exploits specific comparisons involving the NULL operation OID, leading to unexpected application behavior or crashes on Linux, Solaris, and Windows platforms.

References

http://www.ibm.com/support/docview.wss?uid=swg1IO11814
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029672
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.