Tivoli Directory Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:tivoli_directory_server:5.2.0.4:*:*:*:*:*:*:*
part: a version: 5.2.0.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Tivoli Directory Server (dd20397e-23a0-57cd-ada5-2cb8cbc0c9e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-1822 |
vulnerable | 2026-06-08 04:58:02.189281 |
Details available
The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log.
Published: 2011-04-21T10:00:00.000Z
Updated: 2024-09-16T16:38:52.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1821 |
vulnerable | 2026-06-08 04:58:02.188955 |
Details available
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search.
Published: 2011-04-21T10:00:00.000Z
Updated: 2024-09-16T19:47:00.343Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1820 |
vulnerable | 2026-06-08 04:58:02.187128 |
Details available
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) does not properly handle the ibm-auditAttributesOnGroupEvalOp setting for auditing of extended operations, which might allow attackers to obtain sensitive information by reading the audit log.
Published: 2011-04-21T10:00:00.000Z
Updated: 2024-08-06T22:37:25.825Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1206 |
vulnerable | 2026-06-08 04:57:56.902581 |
Details available
Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) allows remote attackers to execute arbitrary code via a crafted LDAP request. NOTE: some of these details are obtained from third party information.
Published: 2011-04-21T10:00:00.000Z
Updated: 2024-08-06T22:21:34.108Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7290 |
vulnerable | 2026-06-08 04:51:06.627685 |
Details available
Memory leak in the ldap_explode_rdn API function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allows remote authenticated users to cause a denial of service (memory consumption) by making many function calls.
Published: 2011-04-21T10:00:00.000Z
Updated: 2024-09-16T17:59:50.846Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7289 |
vulnerable | 2026-06-08 04:51:06.627356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7288 |
vulnerable | 2026-06-08 04:51:06.625689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7287 |
vulnerable | 2026-06-08 04:51:06.625267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6743 |
vulnerable | 2026-06-08 04:50:09.687314 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6742 |
vulnerable | 2026-06-08 04:50:09.686927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.