| Package | Affected versions | Patched versions |
|---|---|---|
| tivoli directory server | = 6.0= 6.0.0.0= 6.0.0.1= 6.0.0.14= 6.0.0.19= 6.0.0.33= 6.0.0.41= 6.0.0.45= 6.0.0.52= 6.0.0.53= 6.0.0.54= 6.0.0.55= 6.0.0.56= 6.0.0.57= 6.0.0.58= 6.0.0.59= 6.0.0.60= 6.0.0.61= 6.0.0.7= 6.0.0.8 |
The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free