CVE-2005-3567

Description

slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/22989

http://www.vupen.com/english/advisories/2005/2356

http://www.securityfocus.com/bid/15367

http://www.osvdb.org/20672

http://www.kb.cert.org/vuls/id/194753

http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only

http://www-1.ibm.com/support/docview.wss?uid=swg21222159

http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247

http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en

http://securitytracker.com/id?1015171

http://secunia.com/advisories/17484

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS