CVE-2009-3088
Last modified
CVE-2009-3088 is a vulnerability of currently unknown severity. Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. EPSS estimates a 1.97% chance of exploitation in the next 30 days.
Description
Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server (TDS) 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Tivoli Directory Server | 6.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-3088?
How severe is CVE-2009-3088?
How do I fix CVE-2009-3088?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-3082SQL injection vulnerability in wcategory.php in Snow Hall Si…
- CVE-2009-3083The msn_slp_sip_recv function in libpurple/protocols/msn/slp…
- CVE-2009-3084The msn_slp_process_msg function in libpurple/protocols/msn/…
- CVE-2009-3085The XMPP protocol plugin in libpurple in Pidgin before 2.6.2…
- CVE-2009-3086A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, an…
- CVE-2009-3087Unspecified vulnerability in nserver.exe in the server in IB…
- CVE-2009-3089IBM Tivoli Directory Server (TDS) 6.0 allows remote attacker…
- CVE-2009-3090Unspecified vulnerability in IBM Tivoli Directory Server (TD…
- CVE-2009-3091Unspecified vulnerability on the ASUS WL-330gE has unknown i…
- CVE-2009-3092Buffer overflow on the ASUS WL-500W wireless router has unkn…
- CVE-2009-3093Unspecified vulnerability on the ASUS WL-500W wireless route…
- CVE-2009-3094The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp…
Are you affected by CVE-2009-3088?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
