CVE-2007-6742: Medium severity ibm tivoli directory server vulnerability

Published Apr 21, 2011

Updated

The getfilterlist function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service (infinite loop) via a malformed search filter.

Affected Software

2 affected components

IBM Tivoli Directory Server=5.2.0

IBM Tivoli Directory Server=5.2.0.4

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg24029663

Event History

Apr 21, 2011

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6742?

CVE-2007-6742 has a high severity rating due to its potential to cause a denial of service by an authenticated user.

How do I fix CVE-2007-6742?

To fix CVE-2007-6742, you should upgrade IBM Tivoli Directory Server to version 5.2.0.5-TIV-ITDS-LA0006 or later.

Which versions of IBM Tivoli Directory Server are affected by CVE-2007-6742?

CVE-2007-6742 affects IBM Tivoli Directory Server versions 5.2.0 and 5.2.0.4.

What impact does CVE-2007-6742 have on users?

CVE-2007-6742 allows remote authenticated users to trigger an infinite loop, leading to denial of service.

Can CVE-2007-6742 be exploited remotely?

Yes, CVE-2007-6742 can be exploited remotely by authenticated users who send malformed search filters.