CVE-2010-4788: Input Validation
Published Apr 21, 2011
·Updated
IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search.
Affected Software
20 affected components
IBM Tivoli Directory Server=6.0
IBM Tivoli Directory Server=6.0.0.0
IBM Tivoli Directory Server=6.0.0.1
IBM Tivoli Directory Server=6.0.0.7
IBM Tivoli Directory Server=6.0.0.8
IBM Tivoli Directory Server=6.0.0.14
IBM Tivoli Directory Server=6.0.0.19
IBM Tivoli Directory Server=6.0.0.33
IBM Tivoli Directory Server=6.0.0.41
IBM Tivoli Directory Server=6.0.0.45
IBM Tivoli Directory Server=6.0.0.52
IBM Tivoli Directory Server=6.0.0.53
IBM Tivoli Directory Server=6.0.0.54
IBM Tivoli Directory Server=6.0.0.55
IBM Tivoli Directory Server=6.0.0.56
IBM Tivoli Directory Server=6.0.0.57
IBM Tivoli Directory Server=6.0.0.58
IBM Tivoli Directory Server=6.0.0.59
IBM Tivoli Directory Server=6.0.0.60
IBM Tivoli Directory Server=6.0.0.61
Remediation
Patch Available
Event History
Apr 21, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4788?
CVE-2010-4788 has been classified as a medium severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2010-4788?
To fix CVE-2010-4788, update your IBM Tivoli Directory Server to version 6.0.0.62 or later.
3
What are the affected versions of IBM Tivoli Directory Server for CVE-2010-4788?
CVE-2010-4788 affects multiple versions including 6.0.0.0 through 6.0.0.61.
4
Can CVE-2010-4788 be exploited remotely?
Yes, CVE-2010-4788 can be exploited by remote authenticated users.
5
What impact does CVE-2010-4788 have on system performance?
CVE-2010-4788 can lead to a denial of service, causing the daemon to crash.