IBM Tivoli Directory Server Unspecified Unauthorized Access Vulnerability

Bugtraq ID:	15367
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 09 2005 12:00AM
Updated:	Nov 09 2005 12:00AM
Credit:	The vendor disclosed this issue.
Vulnerable:	IBM Tivoli Identity Manager 4.6 + IBM Directory Server 6.0 .0 IBM Tivoli Federated Identity Manager IBM Tivoli Directory Integrator 6.0 + IBM Directory Server 5.2 .0 IBM Tivoli Directory Integrator 5.2 + IBM Directory Server 5.2 .0 IBM Tivoli Access Manager for Operating Systems 5.0.1 IBM Tivoli Access Manager for e-business 5.1 IBM Tivoli Access Manager for Business Integration 5.1 IBM Directory Server 6.0 .0 IBM Directory Server 5.2 .0
Not Vulnerable:

IBM Tivoli Directory Server Unspecified Unauthorized Access Vulnerability

IBM Tivoli Directory Server is susceptible to an unspecified flaw that allows remote unauthorized access to the directory server allowing attackers to access, alter, or delete data contained in the directory server database.

Very little information is available on this vulnerability; this BID will be updated if further information becomes available.

IBM Tivoli Directory Server Unspecified Unauthorized Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM Tivoli Directory Server Unspecified Unauthorized Access Vulnerability

Solution:
IBM has released advisories and fixes to address this issue. Please see the referenced advisories for further information on obtaining fixes.

IBM Tivoli Directory Server Unspecified Unauthorized Access Vulnerability

References:

• 1222123 - Potential Security Vulnerability For IBM Tivoli Directory Server (IBM)
  
• 1222131 - Potential Security Vulnerability For IBM Tivoli Directory Server (IBM)
  
• 1222159 - Potential Security Vulnerability For IBM Tivoli Directory Server (IBM)
  
• Tivoli Directory Server Homepage (IBM)