Secunia

Multiple vulnerabilities have been reported in IBM Tivoli Directory Server, which can be exploited by malicious users and potentially malicious people to cause a DoS (Denial of Service).

1) An unspecified error can be exploited to cause a heap-based buffer overflow in "ibmdiradm".

2) A NULL pointer dereference error in "do_extendedOp()" can be exploited to crash ibmslapd.exe.

This vulnerability is reported in version 6.0, 6.1, and 6.2 running on Linux, Solaris, and Windows.

3) A NULL pointer dereference error can be exploited to cause "ibmdiradm" to crash.

4) An unspecified error in IBM Tivoli Directory Server can be exploited to cause a DoS.

The vulnerabilities are reported in version 6.0. Other versions may also be affected.

Solution
Apply APARs.
Further details available in Customer Area

Provided and/or discovered by
Reportedly modules for VulnDisco Pack.

Changelog
Further details available in Customer Area

Original Advisory
http://intevydis.com/vd-list.shtml
http://intevydis.blogspot.com/2010/01/tivoli-directory-server-62-doextendedop.html

IBM:
http://www-01.ibm.com/support/docview.wss?uid=swg24025768
http://www-01.ibm.com/support/docview.wss?uid=swg1IO11823
http://www-01.ibm.com/support/docview.wss?uid=swg24025815
http://www-01.ibm.com/support/docview.wss?uid=swg1IO11814
http://www-01.ibm.com/support/docview.wss?uid=swg24026122
http://www-01.ibm.com/support/docview.wss?uid=swg1IO11840

Deep Links
Links available in Customer Area