cbcvebase.
CVE-2009-5072
published 2011-04-21

CVE-2009-5072: Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated…

PriorityP411medium4CVSS 2.0
AVNACLAuSCNINAP
EPSS
0.88%
54.9th percentile
Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument.

Affected

19 ranges
VendorProductVersion rangeFixed in
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
ibmtivoli_directory_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.