Lucene search

MitreCVE-2008-2943

HistoryJun 30, 2008 - 9:41 p.m.

CVE-2008-2943

2008-06-3021:41:00

CWE-399

mitre

web.nvd.nist.gov

cve-2008-2943

ibm tivoli directory server

tds

double free vulnerability

denial of service

arbitrary code execution

ldap

abend

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.027

Percentile

90.6%

JSON

Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE: the vendor states “There is no real risk of a vulnerability,” although there are likely scenarios in which a user is allowed to make administrative LDAP requests but does not have the privileges to stop the server.

Affected configurations

Nvd

Node

ibmtivoli_directory_serverMatch6.1.0.0

ibmtivoli_directory_serverMatch6.1.0.1

ibmtivoli_directory_serverMatch6.1.0.2

ibmtivoli_directory_serverMatch6.1.0.3

ibmtivoli_directory_serverMatch6.1.0.4

ibmtivoli_directory_serverMatch6.1.0.5

ibmtivoli_directory_serverMatch6.1.0.6

ibmtivoli_directory_serverMatch6.1.0.7

ibmtivoli_directory_serverMatch6.1.0.8

ibmtivoli_directory_serverMatch6.1.0.9

ibmtivoli_directory_serverMatch6.1.0.10

ibmtivoli_directory_serverMatch6.1.0.11

ibmtivoli_directory_serverMatch6.1.0.12

ibmtivoli_directory_serverMatch6.1.0.13

ibmtivoli_directory_serverMatch6.1.0.14

ibmtivoli_directory_serverMatch6.1.0.15

VendorProductVersionCPE
ibmtivoli_directory_server6.1.0.0cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.0:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.1cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.1:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.2cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.2:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.3cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.3:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.4cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.4:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.5cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.5:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.6cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.6:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.7cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.7:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.8cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.8:*:*:*:*:*:*:*
ibmtivoli_directory_server6.1.0.9cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_directory_server	6.1.0.0	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.0:::::::*
ibm	tivoli_directory_server	6.1.0.1	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.1:::::::*
ibm	tivoli_directory_server	6.1.0.2	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.2:::::::*
ibm	tivoli_directory_server	6.1.0.3	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.3:::::::*
ibm	tivoli_directory_server	6.1.0.4	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.4:::::::*
ibm	tivoli_directory_server	6.1.0.5	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.5:::::::*
ibm	tivoli_directory_server	6.1.0.6	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.6:::::::*
ibm	tivoli_directory_server	6.1.0.7	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.7:::::::*
ibm	tivoli_directory_server	6.1.0.8	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.8:::::::*
ibm	tivoli_directory_server	6.1.0.9	cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.9:::::::*

Rows per page:

1-10 of 161

References

secunia.com/advisories/30786

www-1.ibm.com/support/docview.wss?uid=swg1IO09113

www.securityfocus.com/bid/30010

www.vupen.com/english/advisories/2008/1970

exchange.xforce.ibmcloud.com/vulnerabilities/43465

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.027

Percentile

90.6%

JSON

Related for CVE-2008-2943