medium5.8
CVE-2005-3567
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and de…
Impact
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tivoli Directory Server | Versions 5.2.0, 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17484
- http://securitytracker.com/id?1015171
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only
- http://www.kb.cert.org/vuls/id/194753
- http://www.osvdb.org/20672
- http://www.securityfocus.com/bid/15367
- http://www.vupen.com/english/advisories/2005/2356
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22989
- http://secunia.com/advisories/17484
- http://securitytracker.com/id?1015171
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only
- http://www.kb.cert.org/vuls/id/194753
- http://www.osvdb.org/20672
- http://www.securityfocus.com/bid/15367
- http://www.vupen.com/english/advisories/2005/2356
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22989