2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2009-5072" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2011-04-21T10:55:01.093" ,
2024-11-22 11:14:00 +00:00
"lastModified" : "2024-11-21T01:11:07.177" ,
"vulnStatus" : "Modified" ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument."
} ,
{
"lang" : "es" ,
"value" : "P\u00e9rdida de memoria en la funci\u00f3n ldap_explode_dn en IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.61 (tambi\u00e9n conocido como v6.0.0.8-ITV-ITDS-IF0003) permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (consumo de memoria) a trav\u00e9s de un argumento de cadena vac\u00eda."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P" ,
2024-11-22 11:14:00 +00:00
"baseScore" : 4.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-11-22 11:14:00 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-399"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "04980717-662D-4BB1-B52E-65ED0773080A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "08B63191-A886-445B-8DF7-DAFB60F32343"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5AD57EC4-40A8-432F-B3B0-96941779B96A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "574CF7FC-A438-468B-9B4C-4355005D363F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DF13A015-1EED-4BB1-97CF-84CF67A2D74B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C1C81618-2FD8-49B1-9864-4A1C7501A162"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "92805FE4-9E5A-4366-8AB9-C846A355E9E6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1BB961FA-0305-4D2B-90A1-BE63903D16AA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ECF9F5BF-FE5A-403E-A661-04673F5390A5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8E857FD0-DCD1-4194-8F08-500B118088FE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "460ADE05-414D-4870-A192-AA66911B71F5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4C9DA0B9-4554-4B06-B55E-08401CFD84D4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE7B4F0B-0801-4808-A849-466753701523"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.59:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DE04E834-CC79-405D-B885-C56192F0038C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.60:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F11078B5-078C-4069-8288-B8A34D2635DA"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg1IO11407" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg24029672" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch"
]
2024-11-22 11:14:00 +00:00
} ,
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg1IO11407" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.ibm.com/support/docview.wss?uid=swg24029672" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2023-04-24 12:24:31 +02:00
}
]
}
