CVE-2005-3567 | BDVDB-2026-13296 Detail
Description#
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/17484
- http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only
- http://www.vupen.com/english/advisories/2005/2356
- http://www.kb.cert.org/vuls/id/194753
- http://www-1.ibm.com/support/docview.wss?uid=swg21222159
- http://www.securityfocus.com/bid/15367
- http://www.osvdb.org/20672
- http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en
- http://securitytracker.com/id?1015171
- http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22989
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.