CVE-2010-4785

{"id": "CVE-2010-4785", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-04-21T10:55:01.203", "references": [{"url": "http://www.ibm.com/support/docview.wss?uid=swg1IO11814", "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg24029672", "tags": ["Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID."}, {"lang": "es", "value": "La funci\u00f3n do_extendedOp en ibmslapd en IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.62 (tambi\u00e9n conocida como 6.0.0.8-ITV-ITDS-IF0004) en Linux, Solaris y Windows permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (ABEND) a trav\u00e9s de una operaci\u00f3n extentida sobre una petici\u00f3n LDAP mal construida que activa ciertas comparaciones que implican la operaci\u00f3n NULL OID."}], "lastModified": "2011-04-21T10:55:01.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04980717-662D-4BB1-B52E-65ED0773080A"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08B63191-A886-445B-8DF7-DAFB60F32343"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AD57EC4-40A8-432F-B3B0-96941779B96A"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "574CF7FC-A438-468B-9B4C-4355005D363F"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF13A015-1EED-4BB1-97CF-84CF67A2D74B"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1C81618-2FD8-49B1-9864-4A1C7501A162"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92805FE4-9E5A-4366-8AB9-C846A355E9E6"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BB961FA-0305-4D2B-90A1-BE63903D16AA"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECF9F5BF-FE5A-403E-A661-04673F5390A5"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E857FD0-DCD1-4194-8F08-500B118088FE"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "460ADE05-414D-4870-A192-AA66911B71F5"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C9DA0B9-4554-4B06-B55E-08401CFD84D4"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE7B4F0B-0801-4808-A849-466753701523"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.59:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE04E834-CC79-405D-B885-C56192F0038C"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F11078B5-078C-4069-8288-B8A34D2635DA"}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.61:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58360839-9020-4567-B60B-5CBFC815E440"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"}, {"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}, {"criteria": "cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11AEFEC9-5DB4-44CB-977D-6561DC1680C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}