CVE-2012-0726

Published: Apr 22, 2012Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

Affected (19)

Products: Ibm: Tivoli Directory Server

Ibm

1 product

Tivoli Directory Server

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Directory Server	Up to 6.3.0
Ibm Tivoli Directory Server	Version 3.2.2
Ibm Tivoli Directory Server	Version 4.1
Ibm Tivoli Directory Server	Version 5.2.0
Ibm Tivoli Directory Server	Version 6.0.0.69
Ibm Tivoli Directory Server	Version 6.0.0.7
Ibm Tivoli Directory Server	Version 6.0.0.8
Ibm Tivoli Directory Server	Version 6.0.0
Ibm Tivoli Directory Server	Version 6.0
Ibm Tivoli Directory Server	Version 6.1.0.45
Ibm Tivoli Directory Server	Version 6.1.0.46
Ibm Tivoli Directory Server	Version 6.1.0.47
Ibm Tivoli Directory Server	Version 6.1.0.48
Ibm Tivoli Directory Server	Version 6.1.0
Ibm Tivoli Directory Server	Version 6.2.0.19
Ibm Tivoli Directory Server	Version 6.2.0.20
Ibm Tivoli Directory Server	Version 6.2.0.21
Ibm Tivoli Directory Server	Version 6.2.0.22
Ibm Tivoli Directory Server	Version 6.2.0