CVEvulnerability
CVE-2005-3567
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.
Affected configurations
• ibm tivoli directory server 5.2.0
• ibm tivoli directory server 6.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/17484 Patch, Vendor Advisory
- http://securitytracker.com/id?1015171 Patch
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159 Patch, Vendor Advisory
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only www-1.ibm.com
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only www-1.ibm.com
- http://www.kb.cert.org/vuls/id/194753 US Government Resource
- http://www.osvdb.org/20672 Patch
- http://www.securityfocus.com/bid/15367 Patch
- http://www.vupen.com/english/advisories/2005/2356 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22989 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/17484 Patch, Vendor Advisory
- http://securitytracker.com/id?1015171 Patch
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159 Patch, Vendor Advisory
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only www-1.ibm.com
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only www-1.ibm.com
- http://www.kb.cert.org/vuls/id/194753 US Government Resource
- http://www.osvdb.org/20672 Patch
- http://www.securityfocus.com/bid/15367 Patch
- http://www.vupen.com/english/advisories/2005/2356 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22989 exchange.xforce.ibmcloud.com