Denial of Service Vulnerability in IBM Tivoli Directory Server
CVE-2010-4788

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Directory Server
Vendor
CVE Published:
21 April 2011

Summary

IBM Tivoli Directory Server version 6.0 prior to 6.0.0.62 fails to properly manage locking mechanisms during linked-list access. This oversight allows remote authenticated users to exploit the vulnerability through paged searches, triggering a denial of service by crashing the server's daemon. It poses significant risks to service availability, urging timely updates and security measures.

References

http://www.ibm.com/support/docview.wss?uid=swg24029672
x_refsource_CONFIRM
http://www.ibm.com/support/docview.wss?uid=swg1IO11943
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.