« Volver al listado

CVE-2010-4785

Estado: ModificadaMedia (4)—

The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Tivoli Directory Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-4785",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-04-21T10:55:01.203",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO11814",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO11814",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID."
    },
    {
      "lang": "es",
      "value": "La función do_extendedOp en ibmslapd en IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.62 (también conocida como 6.0.0.8-ITV-ITDS-IF0004) en Linux, Solaris y Windows permite a usuarios remotos autenticados causar una denegación de servicio (ABEND) a través de una operación extentida sobre una petición LDAP mal construida que activa ciertas comparaciones que implican la operación NULL OID."
    }
  ],
  "lastModified": "2026-06-16T23:25:32.567",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04980717-662D-4BB1-B52E-65ED0773080A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08B63191-A886-445B-8DF7-DAFB60F32343"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AD57EC4-40A8-432F-B3B0-96941779B96A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "574CF7FC-A438-468B-9B4C-4355005D363F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF13A015-1EED-4BB1-97CF-84CF67A2D74B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1C81618-2FD8-49B1-9864-4A1C7501A162"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92805FE4-9E5A-4366-8AB9-C846A355E9E6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BB961FA-0305-4D2B-90A1-BE63903D16AA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECF9F5BF-FE5A-403E-A661-04673F5390A5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E857FD0-DCD1-4194-8F08-500B118088FE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "460ADE05-414D-4870-A192-AA66911B71F5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C9DA0B9-4554-4B06-B55E-08401CFD84D4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE7B4F0B-0801-4808-A849-466753701523"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.59:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE04E834-CC79-405D-B885-C56192F0038C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F11078B5-078C-4069-8288-B8A34D2635DA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.61:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58360839-9020-4567-B60B-5CBFC815E440"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
            },
            {
              "criteria": "cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "11AEFEC9-5DB4-44CB-977D-6561DC1680C1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}