CVE-2009-5073 - IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry

Back Back to CVE browser

MEDIUM

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry

Published Apr 21, 2011

4.0

MEDIUM

CVSS 2.0

EPSS 0.88%

Description

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (3)

http://www.ibm.com/support/docview.wss?uid=swg1IO10802
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029672
x_refsource_CONFIRMPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-5028
Advisory

Link	Providers	Tags
http://www.ibm.com/support/docview.wss?uid=swg1IO10802		vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029672		x_refsource_CONFIRMPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-5028		Advisory