CVE-2005-3567
First published: Wed Nov 16 2005(Updated: )
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Directory Server | =5.2.0 | |
| IBM Tivoli Directory Server | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159
- http://securitytracker.com/id?1015171
- http://secunia.com/advisories/17484
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
- http://www.kb.cert.org/vuls/id/194753
- http://www.securityfocus.com/bid/15367
- http://www.osvdb.org/20672
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only
- http://www.vupen.com/english/advisories/2005/2356
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22989
Frequently Asked Questions
What is the severity of CVE-2005-3567?
CVE-2005-3567 has a critical severity rating due to its potential to allow unauthorized modifications and deletions of directory data.
How do I fix CVE-2005-3567?
To fix CVE-2005-3567, upgrade IBM Tivoli Directory Server to a patched version that mitigates this vulnerability.
What versions of IBM Tivoli Directory Server are affected by CVE-2005-3567?
CVE-2005-3567 affects IBM Tivoli Directory Server versions 5.2.0 and 6.0.0.
What impact does CVE-2005-3567 have on system security?
CVE-2005-3567 allows attackers to bypass authentication, leading to unauthorized access and potential data compromise.
Who can be affected by CVE-2005-3567?
Organizations using IBM Tivoli Directory Server versions 5.2.0 and 6.0.0 are at risk from CVE-2005-3567.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm tivoli directory server
- version/ibm tivoli directory server/5.2.0
- version/ibm tivoli directory server/6.0