CVE-2005-3567

EPSS 0.9%

slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/17484 http://securitytracker.com/id?1015171 https://exchange.xforce.ibmcloud.com/vulnerabilities/22989 http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247 http://www-1.ibm.com/support/docview.wss?uid=swg21222159 http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only http://www.kb.cert.org/vuls/id/194753 http://www.osvdb.org/20672 http://www.securityfocus.com/bid/15367 http://www.vupen.com/english/advisories/2005/2356