IBM Tivoli Directory Server Log File Information Disclosure Vulnerability
BID:48512
Info
IBM Tivoli Directory Server Log File Information Disclosure Vulnerability
| Bugtraq ID: | 48512 |
| Class: | Design Error |
| CVE: |
CVE-2011-2758 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 30 2011 12:00AM |
| Updated: | Mar 19 2015 07:35AM |
| Credit: | IBM |
| Vulnerable: |
IBM Tivoli Directory Server 6.1 .9 IBM Tivoli Directory Server 6.1 .8 IBM Tivoli Directory Server 6.1 .7 IBM Tivoli Directory Server 6.1 .6 IBM Tivoli Directory Server 6.1 .5 IBM Tivoli Directory Server 6.1 .4 IBM Tivoli Directory Server 6.1 .3 IBM Tivoli Directory Server 6.1 .2 IBM Tivoli Directory Server 6.1 .15 IBM Tivoli Directory Server 6.1 .14 IBM Tivoli Directory Server 6.1 .13 IBM Tivoli Directory Server 6.1 .12 IBM Tivoli Directory Server 6.1 .11 IBM Tivoli Directory Server 6.1 .10 IBM Tivoli Directory Server 6.1 .1 IBM Tivoli Directory Server 6.1 .0 IBM Tivoli Directory Server 6.0 8-TIV-ITDS-IF0009 IBM Tivoli Directory Server 6.0 8 IBM Tivoli Directory Server 6.0 .7 IBM Tivoli Directory Server 6.0 .21 IBM Tivoli Directory Server 6.2 IBM Tivoli Directory Server 6.1.0.5-TIV-ITDS-IF0 IBM Tivoli Directory Server 6.1 IBM Tivoli Directory Server 6.0.0.8-TIV-ITDS-IF0 IBM Tivoli Directory Server 6.0.0.8 IBM Tivoli Directory Server 6.0 |
| Not Vulnerable: |
IBM Tivoli Directory Server 6.2.0.3-TIV-ITDS-IF0 |
Discussion
IBM Tivoli Directory Server Log File Information Disclosure Vulnerability
The IBM Tivoli Directory Server is prone to an information-disclosure vulnerability.
Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.
IBM Tivoli Directory Server 6.2 is vulnerable; other versions may also be affected.
The IBM Tivoli Directory Server is prone to an information-disclosure vulnerability.
Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.
IBM Tivoli Directory Server 6.2 is vulnerable; other versions may also be affected.
Exploit / POC
IBM Tivoli Directory Server Log File Information Disclosure Vulnerability
Attackers can use a Web browser to exploit the issue.
Attackers can use a Web browser to exploit the issue.
Solution / Fix
IBM Tivoli Directory Server Log File Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
IBM Tivoli Directory Server Log File Information Disclosure Vulnerability
References:
References: