CVE-2009-3089
Last modified
CVE-2009-3089 is a vulnerability of currently unknown severity. IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. EPSS estimates a 1.79% chance of exploitation in the next 30 days.
Description
IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors, related to (1) the ibmslapd.exe daemon on Windows and (2) the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain modules in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2006-0717. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Tivoli Directory Server | 6.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-3089?
How severe is CVE-2009-3089?
How do I fix CVE-2009-3089?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-3083The msn_slp_sip_recv function in libpurple/protocols/msn/slp…
- CVE-2009-3084The msn_slp_process_msg function in libpurple/protocols/msn/…
- CVE-2009-3085The XMPP protocol plugin in libpurple in Pidgin before 2.6.2…
- CVE-2009-3086A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, an…
- CVE-2009-3087Unspecified vulnerability in nserver.exe in the server in IB…
- CVE-2009-3088Heap-based buffer overflow in ibmdiradm in IBM Tivoli Direct…
- CVE-2009-3090Unspecified vulnerability in IBM Tivoli Directory Server (TD…
- CVE-2009-3091Unspecified vulnerability on the ASUS WL-330gE has unknown i…
- CVE-2009-3092Buffer overflow on the ASUS WL-500W wireless router has unkn…
- CVE-2009-3093Unspecified vulnerability on the ASUS WL-500W wireless route…
- CVE-2009-3094The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp…
- CVE-2009-3095The mod_proxy_ftp module in the Apache HTTP Server allows re…
Are you affected by CVE-2009-3089?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
