CVE-2010-4788 - IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search

Back Back to CVE browser

MEDIUM

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search

Published Apr 21, 2011

4.0

MEDIUM

CVSS 2.0

EPSS 0.88%

Description

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://www.ibm.com/support/docview.wss?uid=swg1IO11943
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029672
x_refsource_CONFIRMPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-4753
Advisory

Link	Providers	Tags
http://www.ibm.com/support/docview.wss?uid=swg1IO11943		vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029672		x_refsource_CONFIRMPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-4753		Advisory