IBM Tivoli Directory Server SASL Bind Request Buffer Overflow (uncredentialed check)
Critical Nessus Plugin ID 54943
SynopsisThe remote LDAP server is vulnerable to a buffer overflow attack.
DescriptionBased on the response to a malformed LDAP bind request, it appears that the installed version of IBM Tivoli Directory Server running on the remote host is affected by a remote buffer overflow vulnerability.
A malicious LDAP request could cause a buffer overrun in the server, potentially allowing an unauthenticated remote attacker to execute arbitrary code within Tivoli Directory Server's server process. This vulnerability has only been recreated on 32 bit platforms. (IO14010, IO14013, IO14028, IO14046, IO14045).
Note that only IBM Tivoli Directory Server installs running on a 32-bit platform are known to be affected.
SolutionInstall the appropriate fix based on the vendor's advisory :