
CVE-2009-3089
https://notcve.org/view.php?id=CVE-2009-3089
08 Sep 2009 — IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a... • http://intevydis.com/vd-list.shtml •

CVE-2009-3090
https://notcve.org/view.php?id=CVE-2009-3090
08 Sep 2009 — Unspecified vulnerability in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Vulnerabilidad no especificada en IBM Tivoli Directory Server (TDS) v6.0 para Linux... • http://intevydis.com/vd-list.shtml •

CVE-2008-2943 – IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service
https://notcve.org/view.php?id=CVE-2008-2943
30 Jun 2008 — Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE: the vendor states "There is no real risk of a vulnerability," although there are likely scenarios in which a user is allowed to make administrative LDAP requests but does not have the privileges to stop the ser... • https://www.exploit-db.com/exploits/31999 • CWE-399: Resource Management Errors •

CVE-2006-0717 – IBM Tivoli Directory Server 6.0 - LDAP Memory Corruption
https://notcve.org/view.php?id=CVE-2006-0717
15 Feb 2006 — IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite. • https://www.exploit-db.com/exploits/27196 •

CVE-2005-3567
https://notcve.org/view.php?id=CVE-2005-3567
16 Nov 2005 — slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors. • http://secunia.com/advisories/17484 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2004-2526 – IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal
https://notcve.org/view.php?id=CVE-2004-2526
31 Dec 2004 — Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter. • https://www.exploit-db.com/exploits/24345 •