Lucene search

MitreCVE-2009-3088

HistorySep 08, 2009 - 6:30 p.m.

CVE-2009-3088

2009-09-0818:30:00

CWE-119

mitre

web.nvd.nist.gov

ibm tivoli directory server

tds 6.0

linux

buffer overflow

heap corruption

cve-2009-3088

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

78.9%

JSON

Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Affected configurations

Nvd

Node

linuxlinux_kernel

AND

ibmtivoli_directory_serverMatch6.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
ibmtivoli_directory_server6.0cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
ibm	tivoli_directory_server	6.0	cpe:2.3:a:ibm:tivoli_directory_server:6.0:::::::*

References

intevydis.com/vd-list.shtml

secunia.com/advisories/36565

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.006

Percentile

78.9%

JSON

Related for CVE-2009-3088