[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Information disclosure vulnerability in the default configuration of TLS in IBM Tivoli Directory Server (TDS)

ID: oval:org.secpod.oval:def:5650Date: (C)2012-05-15   (M)2021-09-30
Class: VULNERABILITYFamily: windows




The host is installed with IBM Tivoli Directory Server (TDS) 6.1 before 6.1.0.47 or 6.2 before 6.2.0.22 or 6.3 before 6.3.0.11 and is prone to information disclosure vulnerability. A flaw is present in the application, which is caused by the use of NULL-MD5 and NULL-SHA ciphers in the default Transport Layer Security (TLS) configuration. Successful exploitation allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

Platform:
Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product:
IBM Tivoli Directory Server
Reference:
CVE-2012-0726
CVE    1
CVE-2012-0726
CPE    16
cpe:/a:ibm:tivoli_directory_server:4.1
cpe:/a:ibm:tivoli_directory_server:5.2.0
cpe:/a:ibm:tivoli_directory_server:6.1.0.48
cpe:/a:ibm:tivoli_directory_server:6.0
...

© SecPod Technologies