CVE-2009-5073

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.ibm.com/support/docview.wss?uid=swg1IO10802
http://www.ibm.com/support/docview.wss?uid=swg24029672	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:tivoli_directory_server:6.0:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:::::::*
	cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:::::::*

History

No history.

Information

Published : 2011-04-21 10:55

Updated : 2011-04-21 10:55

NVD link : CVE-2009-5073

Mitre link : CVE-2009-5073

CVE.ORG link : CVE-2009-5073

JSON object : View

Products Affected

ibm

tivoli_directory_server

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2009-5073", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-04-21T10:55:01.170", "references": [{"url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg24029672", "tags": ["Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry."}, {"lang": "es", "value": "IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.59 (tambi\u00e9n conocido como v6.0.0.8-ITV-ITDS-IF0001) permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (bucle infinito y el demonio de bloqueo) mediante la adici\u00f3n de un grupo anidado que contiene el Distinguished Name (DN) de su entrada padre."}], "lastModified": "2011-04-21T10:55:01.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04980717-662D-4BB1-B52E-65ED0773080A"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08B63191-A886-445B-8DF7-DAFB60F32343"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AD57EC4-40A8-432F-B3B0-96941779B96A"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "574CF7FC-A438-468B-9B4C-4355005D363F"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF13A015-1EED-4BB1-97CF-84CF67A2D74B"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1C81618-2FD8-49B1-9864-4A1C7501A162"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92805FE4-9E5A-4366-8AB9-C846A355E9E6"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BB961FA-0305-4D2B-90A1-BE63903D16AA"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECF9F5BF-FE5A-403E-A661-04673F5390A5"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E857FD0-DCD1-4194-8F08-500B118088FE"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "460ADE05-414D-4870-A192-AA66911B71F5"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C9DA0B9-4554-4B06-B55E-08401CFD84D4"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE7B4F0B-0801-4808-A849-466753701523"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}