CVE-2009-3089

IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://intevydis.com/vd-list.shtml
http://secunia.com/advisories/36565	Vendor Advisory
http://intevydis.com/vd-list.shtml
http://secunia.com/advisories/36565	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:06

Type	Values Removed	Values Added
References	~~() http://intevydis.com/vd-list.shtml -~~	() http://intevydis.com/vd-list.shtml -
References	~~() http://secunia.com/advisories/36565 - Vendor Advisory~~	() http://secunia.com/advisories/36565 - Vendor Advisory

Information

Published : 2009-09-08 18:30

Updated : 2024-11-21 01:06

NVD link : CVE-2009-3089

Mitre link : CVE-2009-3089

CVE.ORG link : CVE-2009-3089

JSON object : View

Products Affected

ibm

tivoli_directory_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2009-3089", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": true, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-09-08T18:30:00.530", "references": [{"url": "http://intevydis.com/vd-list.shtml", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36565", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://intevydis.com/vd-list.shtml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/36565", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes."}, {"lang": "es", "value": "IBM Tivoli Directory Server (TDS) v6.0 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (referencia a puntero nulo y fin del demonio) mediante vectores no especificados, relacionados con (1) el demonio \"ibmslapd.exe\" para Windows y (2) el demonio \"ibmdiradm\" en el servidor de administraci\u00f3n para Linux, como se ha demostrado por cierto m\u00f3dulo en VulnDisco Pack Professional v8.11, siendo una vulnerabilidad diferente a CVE-2006-0717. NOTA: hasta el 3-3-2009, esta divulgaci\u00f3n no ten\u00eda informaci\u00f3n para su puesta en pr\u00e1ctica. En cualquier caso, como el autor de VulnDisco Pack es un investigador reputado, se ha asignado un identificador CVE con fines de seguimiento."}], "lastModified": "2024-11-21T01:06:30.767", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}