IBM Tivoli Directory Server Multiple Security Vulnerabilities

Bugtraq ID:	47121
Class:	Unknown
CVE:	CVE-2011-1206
Remote:	Yes
Local:	No
Published:	Apr 01 2011 12:00AM
Updated:	Apr 19 2011 06:04PM
Credit:	IBM and Francis Provencher
Vulnerable:	IBM Tivoli Directory Server 6.1 .9 IBM Tivoli Directory Server 6.1 .8 IBM Tivoli Directory Server 6.1 .7 IBM Tivoli Directory Server 6.1 .6 IBM Tivoli Directory Server 6.1 .5 IBM Tivoli Directory Server 6.1 .4 IBM Tivoli Directory Server 6.1 .3 IBM Tivoli Directory Server 6.1 .2 IBM Tivoli Directory Server 6.1 .15 IBM Tivoli Directory Server 6.1 .14 IBM Tivoli Directory Server 6.1 .13 IBM Tivoli Directory Server 6.1 .12 IBM Tivoli Directory Server 6.1 .11 IBM Tivoli Directory Server 6.1 .10 IBM Tivoli Directory Server 6.1 .1 IBM Tivoli Directory Server 6.1 .0 IBM Tivoli Directory Server 6.0 8 IBM Tivoli Directory Server 6.0 .7 IBM Tivoli Directory Server 6.0 .21 IBM Tivoli Directory Server 6.3 IBM Tivoli Directory Server 6.2 IBM Tivoli Directory Server 6.1 IBM Tivoli Directory Server 6.0.0.8-TIV-ITDS-IF0 IBM Tivoli Directory Server 6.0.0.8 IBM Tivoli Directory Server 6.0 IBM Tivoli Directory Server 5.1
Not Vulnerable:	IBM Tivoli Directory Server 6.0 8-TIV-ITDS-IF0009 IBM Tivoli Directory Server 5.2 5-TIV-ITDS-IF0010 IBM Tivoli Directory Server 6.3.0.0-TIV-ITDS-IF0 IBM Tivoli Directory Server 6.2.0.3-TIV-ITDS-IF0 IBM Tivoli Directory Server 6.1.0.5-TIV-ITDS-IF0

IBM Tivoli Directory Server Multiple Security Vulnerabilities

IBM Tivoli Directory Server is prone to a stack-based buffer-overflow and an information-disclosure vulnerability.

Attackers can exploit theses issues to execute arbitrary code within the context of the affected application or retrieve potentially sensitive information.

IBM Tivoli Directory Server Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

The following proof of concept is available:

• /data/vulnerabilities/exploits/47121.pl

IBM Tivoli Directory Server Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

IBM Tivoli Directory Server Multiple Security Vulnerabilities

References:

• IBM Tivoli Directory Server ibmslapd.exe SASL Bind Request Remote Code Execution (TippingPoint)
  
• IBM Tivoli Directory Server SASL Bind Request Remote Code Execution (Francis Provencher)
  
• Tivoli Directory Server Homepage (IBM)
  
• Tivoli Directory Server Security Exposures as part of SCORE product stack (IBM)
  
• Security Vulnerability - CVE-2011-1206 - TDS Remote Code Execution (IBM)
  
• Tivoli Directory Server, Version 5.2.0.5-TIV-ITDS-IF0010 (IBM)
  
• Tivoli Directory Server, Version 6.0.0.8-TIV-ITDS-IF0009 (6.0.0.67) (IBM)