CVE-2005-3567

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-16 · updated 2026-06-16
Weakness: CWE-264

Description

slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors.

Affected products

IBM Tivoli Directory Server: 5.2.0, 6.0

References

http://secunia.com/advisories/17484
http://securitytracker.com/id?1015171
http://www-1.ibm.com/support/docview.wss?rs=767&context=SSVJJU&dc=D400&uid=swg24010819&loc=en_US&cs=UTF-8&lang=en
http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVAIX53SECUR081510_247
http://www-1.ibm.com/support/docview.wss?uid=swg21222159
http://www-1.ibm.com/support/search.wss?rs=0&q=IO02697&apar=only
http://www-1.ibm.com/support/search.wss?rs=0&q=IO02714&apar=only
http://www.kb.cert.org/vuls/id/194753
http://www.osvdb.org/20672
http://www.securityfocus.com/bid/15367
http://www.vupen.com/english/advisories/2005/2356
https://exchange.xforce.ibmcloud.com/vulnerabilities/22989

Get alerted when CVE-2005-3567 or the next vulnerability affects your stack