CVE-2009-5073: Medium severity IBM Tivoli Directory Server vulnerability
IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-5073?
CVE-2009-5073 is classified as a denial of service vulnerability, which can lead to significant disruptions in service.
How do I fix CVE-2009-5073?
To fix CVE-2009-5073, you should upgrade your IBM Tivoli Directory Server to version 6.0.0.59 or later.
Who is affected by CVE-2009-5073?
CVE-2009-5073 affects remote authenticated users of IBM Tivoli Directory Server versions prior to 6.0.0.59.
What can attackers do with CVE-2009-5073?
Attackers can exploit CVE-2009-5073 to create an infinite loop and hang the server daemon, causing a denial of service.
Is there a workaround for CVE-2009-5073?
While the recommended solution is to upgrade, a temporary workaround may include restricting user permissions to prevent the addition of nested groups.