Orange Business Services
Vigil@nce Vigil@nce Vigil@nce
we track for your security since 1999
 home presentation vulnerabilities documentation contact  
subscriber area subscriber area
free access free access
Vigil@nce team describes computer vulnerabilities impacting your systems, and offers solutions to correct them.
recent vulnerabilities recent vulnerabilities
tracked products tracked products
RSS feed RSS feed
vulnerability

vulnerability announce CVE-2010-0922

AIX 5.3: denial of service via LDAP

Synthesis of the vulnerability

A local attacker may forbid the access to users authenticated by LDAP.
Severity: 1/4.
Creation date: 01/03/2010.

Description of the vulnerability

The authentication of users can be managed by LDAP.

When AIX 5.3 Technology Level 11 Service Pack 2 with bos.rte.security 5.3.11.1 is installed, legitimate users cannot access to the system via LDAP.

IBM does not indicate if this behavior is created by a bug, of if it can be created by a local attacker.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: AIX 5.3: denial of service via LDAP.
Keywords: AIX LDAP Level Pack Service Technology denial service.
Identifiers: BID-38444, CVE-2010-0922, IZ69977, VIGILANCE-VUL-9477.

Information sources

Publications and announces
Source example: LDAP users will get failure message during login

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Technology watch team on vulnerabilities



















France Télécom Copyright 1999-2010 Vigil@nce. Vigil@nce is a service from Orange Business Services. Site map. Legal notice. Version française