« Volver al listado

CVE-2010-4789

Estado: ModificadaMedia (4)—

Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Tivoli Directory Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-4789",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-04-21T10:55:01.327",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13364",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13451",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029659",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13364",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO13451",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029659",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de uso después de la liberación en la aplicación proxy-server en IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.65 (también conocido como v6.0.0.8-ITV -ITDS-IF0007) y v6.3 anterior a v6.3.0.1 (también conocido como 6.3.0.0-ITV-ITDS-IF0001 ) permite a usuarios remotos autenticados causar una denegación de servicio (caída del demonio) a través de una búsqueda paginada que es interrumpida por una operación de desasignación LDAP."
    }
  ],
  "lastModified": "2026-06-16T23:25:33.020",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04980717-662D-4BB1-B52E-65ED0773080A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08B63191-A886-445B-8DF7-DAFB60F32343"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AD57EC4-40A8-432F-B3B0-96941779B96A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "574CF7FC-A438-468B-9B4C-4355005D363F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF13A015-1EED-4BB1-97CF-84CF67A2D74B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1C81618-2FD8-49B1-9864-4A1C7501A162"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92805FE4-9E5A-4366-8AB9-C846A355E9E6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BB961FA-0305-4D2B-90A1-BE63903D16AA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECF9F5BF-FE5A-403E-A661-04673F5390A5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E857FD0-DCD1-4194-8F08-500B118088FE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "460ADE05-414D-4870-A192-AA66911B71F5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C9DA0B9-4554-4B06-B55E-08401CFD84D4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE7B4F0B-0801-4808-A849-466753701523"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.59:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE04E834-CC79-405D-B885-C56192F0038C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F11078B5-078C-4069-8288-B8A34D2635DA"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.61:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58360839-9020-4567-B60B-5CBFC815E440"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.62:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90BA24A5-1848-4E2B-85D5-8CDD402F27A4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.63:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85E68335-7E15-4D94-8384-9292831E152A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66F9F849-EB1F-4A8C-A3F3-9662241037C6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D48029C-3455-46A6-A8CA-8013A167979B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}