What’s Vulnerable › Vulnerabilities

CVE-2009-3089

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-09-08 · updated 2026-06-16

Description

IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Affected products

• IBM Tivoli Directory Server: 6.0

References

• http://intevydis.com/vd-list.shtml
• http://secunia.com/advisories/36565
• http://intevydis.com/vd-list.shtml
• http://secunia.com/advisories/36565

Get alerted when CVE-2009-3089 or the next vulnerability affects your stack