CVE-2009-5072: Medium severity ibm tivoli directory server vulnerability
Published Apr 21, 2011
·Updated
Memory leak in the ldapexplodedn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument.
Affected Software
19 affected components
IBM Tivoli Directory Server=6.0.0.14
IBM Tivoli Directory Server=6.0.0.53
IBM Tivoli Directory Server=6.0.0.54
IBM Tivoli Directory Server=6.0.0.0
IBM Tivoli Directory Server=6.0.0.56
IBM Tivoli Directory Server=6.0.0.1
IBM Tivoli Directory Server=6.0.0.7
IBM Tivoli Directory Server=6.0.0.45
IBM Tivoli Directory Server=6.0.0.33
IBM Tivoli Directory Server=6.0.0.52
IBM Tivoli Directory Server=6.0
IBM Tivoli Directory Server=6.0.0.55
IBM Tivoli Directory Server=6.0.0.8
IBM Tivoli Directory Server=6.0.0.59
IBM Tivoli Directory Server=6.0.0.57
IBM Tivoli Directory Server=6.0.0.58
IBM Tivoli Directory Server=6.0.0.60
IBM Tivoli Directory Server=6.0.0.41
IBM Tivoli Directory Server=6.0.0.19
Remediation
Patch Available
Event History
Apr 21, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-5072?
CVE-2009-5072 has a severity rating that indicates it could lead to a denial of service due to memory consumption.
2
How do I fix CVE-2009-5072?
To mitigate CVE-2009-5072, upgrade to IBM Tivoli Directory Server version 6.0.0.61 or later.
3
Which versions of IBM Tivoli Directory Server are affected by CVE-2009-5072?
CVE-2009-5072 affects IBM Tivoli Directory Server versions before 6.0.0.61.
4
Can CVE-2009-5072 be exploited by unauthenticated users?
No, CVE-2009-5072 requires remote authenticated users to exploit the vulnerability.
5
What functions are involved in CVE-2009-5072?
The memory leak in CVE-2009-5072 occurs specifically in the ldap_explode_dn function.