CVE-2008-7287: Medium severity IBM Tivoli Directory Server vulnerability

Published Apr 21, 2011

Updated

Multiple memory leaks in the (1) ldapinit and (2) ldapurlsearchdirect API functions in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service (memory consumption) by making many function calls.

Affected Software

2 affected components

IBM Tivoli Directory Server=5.2.0

IBM Tivoli Directory Server=5.2.0.4

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg24029663

Event History

Apr 21, 2011

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-7287?

CVE-2008-7287 has been classified as a denial of service vulnerability due to memory leaks.

How do I fix CVE-2008-7287?

To address CVE-2008-7287, upgrade IBM Tivoli Directory Server to version 5.2.0.5-TIV-ITDS-LA0007 or later.

Who is affected by CVE-2008-7287?

CVE-2008-7287 affects remote authenticated users of IBM Tivoli Directory Server versions 5.2.0 and 5.2.0.4.

What causes the vulnerability in CVE-2008-7287?

CVE-2008-7287 is caused by multiple memory leaks in the ldap_init and ldap_url_search_direct API functions.

What impact does CVE-2008-7287 have on systems?

CVE-2008-7287 can lead to denial of service by consuming memory through repeated function calls.