Unscored severity · published Apr 21, 2011
CVE-2011-1206
Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka…
–
CVSS
15.7%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) allows remote attackers to execute arbitrary code via a crafted LDAP request. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TD
Tivoli Directory Server · Ibm
5.2.0; 5.2.0.4; 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1206
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1206
Vendor Advisory
http://secunia.com/advisories/44184
securityreason.com
http://securityreason.com/securityalert/8213
securitytracker.com
http://securitytracker.com/id?1025358
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg1IO14009
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg1IO14010
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg1IO14013
More from Tivoli Directory Server
7.8
CVE-2015-1975
The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory…
7.5
CVE-2015-1977
Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and…
5.5
CVE-2015-1976
IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash
–
CVE-2015-2019
IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent…
–
CVE-2015-1978
Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix…