IBM Tivoli Directory Server vulnerabilities

46 CVEs affecting IBM Tivoli Directory Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1975, published 2018-04-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1206, published 2011-04-21. High severity, CVSS 10.0. EPSS: 15.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1…
CVE-2006-0717, published 2006-02-15. Medium severity, CVSS 5.0. EPSS: 9.7% chance of exploitation in the next 30 days. IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite.
CVE-2004-2526, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 9.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.
CVE-2012-2191, published 2012-08-08. Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days. IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a…
CVE-2015-0138, published 2015-03-25. Medium severity, CVSS 4.3. EPSS: 2.8% chance of exploitation in the next 30 days. GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and…
CVE-2008-2943, published 2008-06-30. Medium severity, CVSS 6.0. EPSS: 2.4% chance of exploitation in the next 30 days. Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and possibly execute arbitrary…
CVE-2015-1974, published 2015-06-28. Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days. The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows…
CVE-2012-0726, published 2012-04-22. Medium severity, CVSS 6.4. EPSS: 2.3% chance of exploitation in the next 30 days. The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted…
CVE-2013-6747, published 2014-01-27. High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days. IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service…
CVE-2015-1972, published 2015-06-28. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to obtain…

Latest

CVE-2015-1975, published 2018-04-03. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before…
CVE-2015-1976, published 2017-02-08. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.
CVE-2015-1977, published 2016-07-15. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before…
CVE-2015-2019, published 2015-06-28. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents…
CVE-2015-1978, published 2015-06-28. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before…
CVE-2015-1959, published 2015-06-28. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not properly restrict encrypted…
CVE-2014-6100, published 2014-10-19. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before…