CVE-2005-3567

Published: Nov 16, 2005Modified: Apr 16, 2026

5.8

Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 6.5 / Impact: 6.4

Source: NVD

Description

slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.

Affected (2)

Products: Ibm: Tivoli Directory Server

Ibm

1 product

Tivoli Directory Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Directory Server	Version 5.2.0
Ibm Tivoli Directory Server	Version 6.0

Related CWEs

CWE-264

References (24)

http://secunia.com/advisories/17484

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015171

Source: cve@mitre.org

Patch

http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en

Source: cve@mitre.org

PatchVendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg21222159

Source: cve@mitre.org

PatchVendor Advisory

http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only

Source: cve@mitre.org

http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/194753

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/20672

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/15367

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2005/2356

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/22989

Source: cve@mitre.org

http://secunia.com/advisories/17484