Description
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.
References
- 17484 third-party-advisory
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
- IO02714 vendor-advisory
- ADV-2005-2356 vdb-entry
- VU#194753 third-party-advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159
- 15367 vdb-entry
- 20672 vdb-entry
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en
- 1015171 vdb-entry
- IO02697 vendor-advisory
- tivoli-directory-bypass-security(22989) vdb-entry