CVE-2005-3567
First published: Wed Nov 16 2005(Updated: )
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Directory Server | =5.2.0 | |
| IBM Tivoli Directory Server | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159
- http://securitytracker.com/id?1015171
- http://secunia.com/advisories/17484
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
- http://www.kb.cert.org/vuls/id/194753
- http://www.securityfocus.com/bid/15367
- http://www.osvdb.org/20672
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only
- http://www.vupen.com/english/advisories/2005/2356
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22989
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/type
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/weakness
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm tivoli directory server
- version/ibm tivoli directory server/5.2.0
- version/ibm tivoli directory server/6.0