{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-04-21T10:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029659"}, {"name": "IO13364", "tags": ["vendor-advisory", "x_refsource_AIXAPAR"], "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13364"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}, {"name": "IO13451", "tags": ["vendor-advisory", "x_refsource_AIXAPAR"], "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13451"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-4789", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.ibm.com/support/docview.wss?uid=swg24029659", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg24029659"}, {"name": "IO13364", "refsource": "AIXAPAR", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13364"}, {"name": "http://www.ibm.com/support/docview.wss?uid=swg24029672", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}, {"name": "IO13451", "refsource": "AIXAPAR", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13451"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T04:02:29.038Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029659"}, {"name": "IO13364", "tags": ["vendor-advisory", "x_refsource_AIXAPAR", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13364"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}, {"name": "IO13451", "tags": ["vendor-advisory", "x_refsource_AIXAPAR", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13451"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-4789", "datePublished": "2011-04-21T10:00:00Z", "dateReserved": "2011-04-20T00:00:00Z", "dateUpdated": "2024-09-16T23:45:57.901Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "04980717-662D-4BB1-B52E-65ED0773080A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "08B63191-A886-445B-8DF7-DAFB60F32343", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "5AD57EC4-40A8-432F-B3B0-96941779B96A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "574CF7FC-A438-468B-9B4C-4355005D363F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "DF13A015-1EED-4BB1-97CF-84CF67A2D74B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "C1C81618-2FD8-49B1-9864-4A1C7501A162", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*", "matchCriteriaId": "92805FE4-9E5A-4366-8AB9-C846A355E9E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*", "matchCriteriaId": "1BB961FA-0305-4D2B-90A1-BE63903D16AA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*", "matchCriteriaId": "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*", "matchCriteriaId": "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*", "matchCriteriaId": "ECF9F5BF-FE5A-403E-A661-04673F5390A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*", "matchCriteriaId": "8E857FD0-DCD1-4194-8F08-500B118088FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*", "matchCriteriaId": "460ADE05-414D-4870-A192-AA66911B71F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*", "matchCriteriaId": "4C9DA0B9-4554-4B06-B55E-08401CFD84D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*", "matchCriteriaId": "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*", "matchCriteriaId": "DE7B4F0B-0801-4808-A849-466753701523", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.59:*:*:*:*:*:*:*", "matchCriteriaId": "DE04E834-CC79-405D-B885-C56192F0038C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.60:*:*:*:*:*:*:*", "matchCriteriaId": "F11078B5-078C-4069-8288-B8A34D2635DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.61:*:*:*:*:*:*:*", "matchCriteriaId": "58360839-9020-4567-B60B-5CBFC815E440", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.62:*:*:*:*:*:*:*", "matchCriteriaId": "90BA24A5-1848-4E2B-85D5-8CDD402F27A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.63:*:*:*:*:*:*:*", "matchCriteriaId": "85E68335-7E15-4D94-8384-9292831E152A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.64:*:*:*:*:*:*:*", "matchCriteriaId": "66F9F849-EB1F-4A8C-A3F3-9662241037C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "1D48029C-3455-46A6-A8CA-8013A167979B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation."}, {"lang": "es", "value": "Vulnerabilidad de uso despu\u00e9s de la liberaci\u00f3n en la aplicaci\u00f3n proxy-server en IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.65 (tambi\u00e9n conocido como v6.0.0.8-ITV -ITDS-IF0007) y v6.3 anterior a v6.3.0.1 (tambi\u00e9n conocido como 6.3.0.0-ITV-ITDS-IF0001 ) permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (ca\u00edda del demonio) a trav\u00e9s de una b\u00fasqueda paginada que es interrumpida por una operaci\u00f3n de desasignaci\u00f3n LDAP."}], "id": "CVE-2010-4789", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-04-21T10:55:01.327", "references": [{"source": "cve@mitre.org", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13364"}, {"source": "cve@mitre.org", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13451"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029659"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13364"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13451"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029659"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}