CVE-2009-5073

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-04-21T10:00:00.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "IO10802", "tags": ["vendor-advisory", "x_refsource_AIXAPAR"], "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-5073", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "IO10802", "refsource": "AIXAPAR", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802"}, {"name": "http://www.ibm.com/support/docview.wss?uid=swg24029672", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:24:54.117Z"}, "title": "CVE Program Container", "references": [{"name": "IO10802", "tags": ["vendor-advisory", "x_refsource_AIXAPAR", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-5073", "datePublished": "2011-04-21T10:00:00.000Z", "dateReserved": "2011-04-20T00:00:00.000Z", "dateUpdated": "2024-09-16T22:40:49.517Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "1EF905E9-DDA5-4369-AC6C-FD6E2573E667", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "04980717-662D-4BB1-B52E-65ED0773080A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "08B63191-A886-445B-8DF7-DAFB60F32343", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "5AD57EC4-40A8-432F-B3B0-96941779B96A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "574CF7FC-A438-468B-9B4C-4355005D363F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "DF13A015-1EED-4BB1-97CF-84CF67A2D74B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "C1C81618-2FD8-49B1-9864-4A1C7501A162", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.33:*:*:*:*:*:*:*", "matchCriteriaId": "92805FE4-9E5A-4366-8AB9-C846A355E9E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.41:*:*:*:*:*:*:*", "matchCriteriaId": "1BB961FA-0305-4D2B-90A1-BE63903D16AA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.45:*:*:*:*:*:*:*", "matchCriteriaId": "7B29CF8D-410F-4FF7-BAB3-7541E7C1EA5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.52:*:*:*:*:*:*:*", "matchCriteriaId": "8E435108-AEE8-4FB3-BD46-E34B3E1E8F2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.53:*:*:*:*:*:*:*", "matchCriteriaId": "ECF9F5BF-FE5A-403E-A661-04673F5390A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.54:*:*:*:*:*:*:*", "matchCriteriaId": "8E857FD0-DCD1-4194-8F08-500B118088FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.55:*:*:*:*:*:*:*", "matchCriteriaId": "460ADE05-414D-4870-A192-AA66911B71F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.56:*:*:*:*:*:*:*", "matchCriteriaId": "4C9DA0B9-4554-4B06-B55E-08401CFD84D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.57:*:*:*:*:*:*:*", "matchCriteriaId": "7643F50F-4A2E-45F4-A12A-D5F1E3A10C4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.58:*:*:*:*:*:*:*", "matchCriteriaId": "DE7B4F0B-0801-4808-A849-466753701523", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry."}, {"lang": "es", "value": "IBM Tivoli Directory Server (TDS) v6.0 anterior a v6.0.0.59 (tambi\u00e9n conocido como v6.0.0.8-ITV-ITDS-IF0001) permite a usuarios remotos autenticados causar una denegaci\u00f3n de servicio (bucle infinito y el demonio de bloqueo) mediante la adici\u00f3n de un grupo anidado que contiene el Distinguished Name (DN) de su entrada padre."}], "id": "CVE-2009-5073", "lastModified": "2026-06-16T23:14:56.510", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-04-21T10:55:01.170", "references": [{"source": "cve@mitre.org", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ibm.com/support/docview.wss?uid=swg1IO10802"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.ibm.com/support/docview.wss?uid=swg24029672"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}