TD
Product
Tivoli Directory Server
46
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add Tivoli Directory Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-1975 | 7.8 | Apr 3 | The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory… Affected: 6.0; 6.1.0; 6.2.0.0; 6.3.0.0; 6.3.1.0; 6.4.0 |
| CVE-2015-1977 | 7.5 | Jul 15 | Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and… Affected: 6.2.0; 6.2.0.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; 6.2.0.4; +34 more |
| CVE-2015-1976 | 5.5 | Feb 8 | IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash Affected: 6.0 through 6.0.0.77; 6.1.0 through 6.1.0.72; 6.2.0.0 through 6.2.0.48; 6.3.0.0 through 6.3.0.41 |
| CVE-2015-2019 | – | Jun 28 | IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent… Affected: 6.0; 6.1.0; 6.2.0.0; 6.3.0.0; 6.3.1.0; 6.4.0 |
| CVE-2015-1978 | – | Jun 28 | Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix… Affected: 6.0; 6.1.0; 6.2.0.0; 6.3.0.0; 6.3.1.0; 6.4.0 |
| CVE-2015-1974 | – | Jun 28 | The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4… Affected: 6.0; 6.1.0; 6.2.0.0; 6.3.0.0; 6.3.1.0; 6.4.0 |
| CVE-2015-1972 | – | Jun 28 | IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote… Affected: 6.0; 6.1.0; 6.2.0.0; 6.3.0.0; 6.3.1.0; 6.4.0 |
| CVE-2015-1959 | – | Jun 28 | IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly… Affected: 6.0; 6.1.0; 6.2.0.0; 6.3.0.0; 6.3.1.0; 6.4.0 |
| CVE-2015-0138 | – | Mar 25 | GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before… Affected: through 6.0.0.73; 6.1.0; 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; +34 more |
| CVE-2014-6100 | – | Oct 19 | Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before… Affected: 6.1.0; 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; +34 more |
| CVE-2013-6747 | – | Jan 27 | IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a… Affected: All versions, or not specified |
| CVE-2012-2203 | – | Aug 8 | IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for… Affected: All versions, or not specified |
| CVE-2012-2191 | – | Aug 8 | IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data… Affected: All versions, or not specified |
| CVE-2012-0743 | – | Apr 22 | IBM Tivoli Directory Server (TDS) 6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via a malformed LDAP paged search request Affected: through 6.3.0; 3.2.2; 4.1; 5.2.0; 6.0; 6.0.0; +13 more |
| CVE-2012-0740 | – | Apr 22 | Cross-site scripting (XSS) vulnerability in the Web Admin Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject… Affected: 6.2; 6.2.0.19; 6.2.0.20; 6.2.0.21; 6.3.0; 6.3.0.0; +3 more |
| CVE-2012-0726 | – | Apr 22 | The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger… Affected: through 6.3.0; 3.2.2; 4.1; 5.2.0; 6.0; 6.0.0; +13 more |
| CVE-2011-2759 | – | Jul 17 | The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for… Affected: 6.2; 6.2.0.0; 6.2.0.1; 6.2.0.2 |
| CVE-2011-2758 | – | Jul 17 | IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log… Affected: 6.2; 6.2.0.0; 6.2.0.1; 6.2.0.2 |
| CVE-2010-4789 | – | Apr 21 | Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka… Affected: 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; +18 more |
| CVE-2007-6742 | – | Apr 21 | The get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote… Affected: 5.2.0; 5.2.0.4 |
| CVE-2007-6743 | – | Apr 21 | Double free vulnerability in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause a denial of service (ABEND) via search… Affected: 5.2.0; 5.2.0.4 |
| CVE-2008-7287 | – | Apr 21 | Multiple memory leaks in the (1) ldap_init and (2) ldap_url_search_direct API functions in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote… Affected: 5.2.0; 5.2.0.4 |
| CVE-2008-7288 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service (server destabilization) via an anonymous… Affected: 5.2.0; 5.2.0.4 |
| CVE-2008-7289 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote… Affected: 5.2.0; 5.2.0.4 |
| CVE-2008-7290 | – | Apr 21 | Memory leak in the ldap_explode_rdn API function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allows remote authenticated users to cause a denial of… Affected: 5.2.0; 5.2.0.4 |
| CVE-2009-5072 | – | Apr 21 | Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a… Affected: 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; +13 more |
| CVE-2009-5073 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang)… Affected: 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; +11 more |
| CVE-2010-4785 | – | Apr 21 | The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote… Affected: 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; +14 more |
| CVE-2010-4786 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon crash or hang) via a… Affected: 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; +15 more |
| CVE-2010-4787 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon hang) via a paged search… Affected: 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; +15 more |
| CVE-2010-4788 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users… Affected: 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; +14 more |
| CVE-2011-1206 | – | Apr 21 | Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka… Affected: 5.2.0; 5.2.0.4; 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; +34 more |
| CVE-2011-1820 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2… Affected: 5.2.0; 5.2.0.4; 6.0; 6.0.0.0; 6.0.0.1; 6.0.0.7; +34 more |
| CVE-2011-1821 | – | Apr 21 | IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog… Affected: 5.2.0; 5.2.0.4 |
| CVE-2011-1822 | – | Apr 21 | The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local… Affected: 5.2.0; 5.2.0.4 |
| CVE-2010-4216 | – | Nov 9 | IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote… Affected: 6.0; 6.0.0.7; 6.0.0.8 |
| CVE-2010-4217 | – | Nov 9 | Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote… Affected: 6.0.0.0; 6.0.0.1; 6.0.0.7; 6.0.0.8; 6.0.0.14; 6.0.0.19; +18 more |
| CVE-2010-2927 | – | Aug 2 | The slapi_printmessage function in IBM Tivoli Directory Server (ITDS) before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service (daemon crash) via… Affected: through 6.0.0.8; 6.0; 6.0.0.7 |
| CVE-2010-0312 | – | Jan 14 | The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of service (NULL pointer dereference and daemon… Affected: 6.2 |
| CVE-2009-3090 | – | Sep 8 | Unspecified vulnerability in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain… Affected: 6.0 |
| CVE-2009-3089 | – | Sep 8 | IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the… Affected: 6.0 |
| CVE-2009-3088 | – | Sep 8 | Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger… Affected: 6.0 |
| CVE-2008-2943 | – | Jun 30 | Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and… Affected: 6.1.0.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +10 more |
| CVE-2006-0717 | – | Feb 15 | IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP… Affected: 6.0 |
| CVE-2005-3567 | – | Nov 16 | slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data… Affected: 5.2.0; 6.0 |
| CVE-2004-2526 | – | Dec 31 | Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a Affected: through 4.1; 3.2.2 |
Showing 46