CVE-2009-3089

HIGH 7.8CVE-2009-3089 · Published 08/09/2009 · updated 16/06/2026

In short

CVE-2009-3089 is a HIGH (CVSS 7.8) vulnerability affecting tivoli directory server (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tivoli directory server ibm	`= 6.0`	No fix yet

Description

IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

References

intevydis.com/vd-list.shtml
secunia.com/advisories/36565 · Vendor Advisory

More vulnerabilities in tivoli directory server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tivoli directory server

ibm

= 6.0

No fix yet

Description

More vulnerabilities in tivoli directory server

See all →