A vulnerability has been reported in IBM Tivoli Directory Server (ITDS), which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error and can be exploited to change, modify and/or delete directory data stored in the IBM Tivoli Directory Server.

The vulnerability has been reported in version 5.2.0 and 6.0.0.

ITDS is included with the following products:
* Tivoli Identity Manager version 4.6 (ITDS version 6.0.0).
* Tivoli Access Manager for Business Integration (AMBI) version 5.1 (ITDS version 5.2.0).
* Tivoli Access Manager for e-business (TAM) version 5.1 (ITDS version 5.2.0).
* Tivoli Access Manager for Operating Systems (TAMOS) version 5.1 (ITDS version 5.2.0).
* Tivoli Directory Integrator (ITDI) version 5.2 and version 6.0 (ITDS version 5.2.0).
* Tivoli Federated Identity Manager version 6.0 (ITDS version 5.2.0).
* Tivoli Intelligent ThinkDynamic Orchestrator, version 2.1.0 (ITDS version 5.2.0).
* Tivoli Intelligent Orchestrator, version 3.1.0 (ITDS version 5.2.0).
* Tivoli Provisioning Manager, version 2.1.0 (ITDS version 5.2.0).
* Tivoli Provisioning Manager, version 3.1.0 (ITDS version 5.2.0).
* WebSphere Business Integration for Healthcare Collaborative Network 1.0
* WebSphere Portal for Multiplatforms version 4.1.6, 4.2, 4.2.1, and 4.2.2
* WebSphere Portal for Multiplatforms version 5.0, 5.0.2, and 5.0.2.1 to 5.0.2.3,
* WebSphere Portal for Multiplatforms version 5.1.0.1 and 5.1.0.2.
* AIX 5.2 and 5.3.
* DB2 Content Manager version 8.2 and 8.3.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21222172
http://www-1.ibm.com/support/docview.wss?uid=swg21222159
http://www-1.ibm.com/support/docview.wss?uid=swg21221665
http://www-1.ibm.com/support/docview.wss?uid=swg21222123
http://www-1.ibm.com/support/docview.wss?uid=swg21222124
http://www-1.ibm.com/support/docview.wss?uid=swg21222125
http://www-1.ibm.com/support/docview.wss?uid=swg21222126
http://www-1.ibm.com/support/docview.wss?uid=swg21222127
http://www-1.ibm.com/support/docview.wss?uid=swg21222128
http://www-1.ibm.com/support/docview.wss?uid=swg21222129
http://www-1.ibm.com/support/docview.wss?uid=swg21222130
http://www-1.ibm.com/support/docview.wss?uid=swg21222131
http://www-1.ibm.com/support/docview.wss?uid=swg21222132
http://www-1.ibm.com/support/docview.wss?uid=swg21222133
http://www-1.ibm.com/support/docview.wss?uid=swg21222261
http://www-1.ibm.com/support/docview.wss?uid=swg21222262
http://www-1.ibm.com/support/docview.wss?uid=swg21222267
http://www-1.ibm.com/support/docview.wss?uid=swg21222319
http://www-1.ibm.com/support/docview.wss?uid=swg21222676
http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX52SECUR081511_678
http://www-1.ibm.com/support/docview.wss?uid=swg21223586

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers