CVE-2009-5072
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-5072
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Tivoli Directory Server ldap_explode_dn函数内存泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Tivoli Directory Server（ITDS，现称IBM Security Directory Server，ISDS）是美国IBM公司的一套使用了轻量级目录访问协议（LDAP）的企业身份管理软件。该软件提供一个可信的身份数据基础架构，用于进行身份验证。 IBM Tivoli Directory Server（TDS）6.0.0.61之前的6.0版本（又名6.0.0.8-TIV-ITDS-IF0003）的ldap_explode_dn函数中存在内存泄露漏洞。远程认证用户可以借助空字符串
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-5072
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-5072
Please Login to view more intelligence information
- http://www.ibm.com/support/docview.wss?uid=swg24029672x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2009-5072
Same Patch Batch · n/a · 2011-04-21 · 18 CVEs total
| CVE-2010-4786 | IBM Tivoli Directory Server拒绝服务漏洞 | |
| CVE-2011-1822 | IBM Tivoli Directory Server LDAP_ADD实现敏感信息泄露漏洞 | |
| CVE-2011-1821 | IBM Tivoli Directory Server拒绝服务漏洞 | |
| CVE-2011-1820 | IBM Tivoli Directory Server敏感信息泄露漏洞 | |
| CVE-2011-1206 | IBM Tivoli Directory Server ibmslapd.exe服务器进程栈缓冲区溢出漏洞 | |
| CVE-2011-1149 | Android权限许可和访问控制漏洞 | |
| CVE-2010-4789 | IBM Tivoli Directory Server proxy-server实现释放后使用漏洞 | |
| CVE-2010-4788 | IBM Tivoli Directory Server输入验证漏洞 | |
| CVE-2010-4787 | IBM Tivoli Directory Server资源管理错误漏洞 | |
| CVE-2007-6742 | IBM Tivoli Directory Server get_filter_list函数拒绝服务漏洞 | |
| CVE-2010-4785 | IBM Tivoli Directory Server ibmslapd do_extendedOp函数拒绝服务漏洞 | |
| CVE-2009-5073 | IBM Tivoli Directory Server资源管理错误漏洞 | |
| CVE-2008-7290 | IBM Tivoli Directory Server ldap_explode_rdn API函数内存泄露漏洞 | |
| CVE-2008-7289 | IBM Tivoli Directory Server输入验证漏洞 | |
| CVE-2008-7288 | IBM Tivoli Directory Server资源管理错误漏洞 | |
| CVE-2008-7287 | IBM Tivoli Directory Server ldap_init和ldap_url_search_direct API函数多个内存泄露漏洞 | |
| CVE-2007-6743 | IBM Tivoli Directory Server双重释放漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8251
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list - CVE-2026-8249
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8248
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial
V. Comments for CVE-2009-5072
No comments yet