« Volver al listado

CVE-2009-5073

Estado: ModificadaMedia (4)—

IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Tivoli Directory Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-5073",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-04-21T10:55:01.170",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry."
    },
    {
      "lang": "es",
      "value": "IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.59 (también conocido como v6.0.0.8-ITV-ITDS-IF0001) permite a usuarios remotos autenticados causar una denegación de servicio (bucle infinito y el demonio de bloqueo) mediante la adición de un grupo anidado que contiene el Distinguished Name (DN) de su entrada padre."
    }
  ],
  "lastModified": "2026-06-16T23:14:56.510",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04980717-662D-4BB1-B52E-65ED0773080A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08B63191-A886-445B-8DF7-DAFB60F32343"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AD57EC4-40A8-432F-B3B0-96941779B96A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "574CF7FC-A438-468B-9B4C-4355005D363F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF13A015-1EED-4BB1-97CF-84CF67A2D74B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1C81618-2FD8-49B1-9864-4A1C7501A162"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92805FE4-9E5A-4366-8AB9-C846A355E9E6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BB961FA-0305-4D2B-90A1-BE63903D16AA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECF9F5BF-FE5A-403E-A661-04673F5390A5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E857FD0-DCD1-4194-8F08-500B118088FE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "460ADE05-414D-4870-A192-AA66911B71F5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C9DA0B9-4554-4B06-B55E-08401CFD84D4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE7B4F0B-0801-4808-A849-466753701523"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}