Uočeno je nekoliko ranjivosti vezano uz IBM Tivoli Directory Server. Radi se o LDAP (engl. Lightweight Directory Access Protocol) poslužitelju namijenjenom korporativnom intranetu odnosno Internetu. Ranjivosti su vezane uz način na koji metoda "Double.parseDouble" JRE (eng. Java Runtime Environment) komponente obrađuje posebno oblikovane znakovne nizove koje treba pretvoriti u decimalne brojeve s dvostrukom preciznošću, pogrešnu obradu zahtjeva u "ibmslapd.exe" te način na koji posrednički poslužitelj TDS pohranjuje korisničke lozinke. Zlonamjerni korisnici tako mogu pristupiti osjetljivim podacima, pokrenuti proizvoljan programski kod ili izvesti DoS napad. Savjetuje se nadogradnja.

IBM Tivoli Directory Server Multiple Vulnerabilities
Secunia Advisory 	SA43994 	
Release Date 	2011-04-01
Criticality level 	Moderately criticalModerately critical
Impact 	Exposure of sensitive information
DoS
System access
Where 	From local network
Authentication level 	Available in Customer Area
  	 
Report reliability 	Available in Customer Area
Solution Status 	Vendor Patch
  	 
Systems affected 	Available in Customer Area
Approve distribution 	Available in Customer Area
  	 
Software:	
	IBM Tivoli Directory Server 6.x

Secunia CVSS Score 	Available in Customer Area
CVE Reference(s) 	CVE-2010-4476 CVSS available in Customer Area
	   	

Description

Multiple vulnerabilities have been reported in IBM Tivoli Directory Server, which can be exploited by malicious users to disclose sensitive information and by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.

1) The application bundles a vulnerable version of IBM Java.

For more information:
SA43295

2) An error within ibmslapd.exe when processing certain requests can be exploited to cause a stack-based buffer overflow.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

3) The TDS proxy server stores the user's password in cleartext in the audit log when the backend server is configured to audit extended operations.

The vulnerabilities are reported in versions 6.1, 6.2, and 6.3.

Solution
Apply interm fixes when available.
Further details available in Customer Area

Provided and/or discovered by
2) The vendor credits Francis Provencher, Protek Research Labs via ZDI.
3) Reported by the vendor.

Original Advisory
IBM:
http://www.ibm.com/support/docview.wss?uid=swg21474615