This script is Copyright (C) 2012-2013 Tenable Network Security, Inc.
The remote IBM Tivoli Directory Server contains an information
The IBM Tivoli Directory Server hosted on the remote host supports TLS
NULL-MD5 or NULL_SHA ciphers. This allows remote, unauthenticated
attackers to trigger unencrypted communication via the TLS handshake
Note that this version of Directory Server likely has other
vulnerabilities (i.e., CVE-2012-0743), but Nessus has not checked
for those issues.
See also :
Install the appropriate fix based on the vendor's advisory :
Risk factor :
Medium / CVSS Base Score : 6.4
CVSS Temporal Score : 5.3
Public Exploit Available : true
Nessus Plugin ID: 62574 ()
Bugtraq ID: 53043
CVE ID: CVE-2012-0726
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.