CVE-2006-0717 – IBM Tivoli Directory Server 6.0 - LDAP Memory Corruption
https://notcve.org/view.php?id=CVE-2006-0717
IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite. • https://www.exploit-db.com/exploits/27196 http://lists.immunitysec.com/pipermail/dailydave/2006-February/002921.html http://secunia.com/advisories/18779 http://securitytracker.com/id?1015653 http://www-1.ibm.com/support/docview.wss?uid=swg21230820 http://www.securityfocus.com/bid/16593 http://www.vupen.com/english/advisories/2006/0537 https://exchange.xforce.ibmcloud.com/vulnerabilities/24619 •
CVE-2005-3567
https://notcve.org/view.php?id=CVE-2005-3567
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors. • http://secunia.com/advisories/17484 http://securitytracker.com/id?1015171 http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247 http://www-1.ibm.com/support/docview.wss?uid=swg21222159 http://www-1.ibm.com/support/search.wss? • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2004-2526 – IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal
https://notcve.org/view.php?id=CVE-2004-2526
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter. • https://www.exploit-db.com/exploits/24345 http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.html http://secunia.com/advisories/10347 http://securitytracker.com/id?1010834 http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692 http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631 http://www.oliverkarow.de/research/IDS_directory_traversal.txt http://www.osvdb.org/8367 http://www.securityfocus.com/bid/10841 https://exchange.xforce.ibmcloud.com/vulnerabilities/16850 •