Improper input validation in Ibm Tivoli Directory Server

CVE-2010-4788

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.009 (55.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Tivoli_directory_server — versions 6.0, 6.0.0.0, 6.0.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)