The host is running IBM Tivoli Directory Server and is prone to denial of service vulnerability.

Successful exploitation will allow attacker to crash an affected server, creating a denial of service condition. Impact Level: Application

Apply cumulative interim fix 6.0.0.8-TIV-ITDS-IF0006 http://www-01.ibm.com/support/docview.wss?uid=swg24027463

The flaw is caused by improper handling of 'DIGEST-MD5' authentication requests. By sending a specially-crafted request, a remote attacker could exploit this vulnerability using multiple incomplete connections to cause the service to terminate.

IBM Tivoli Directory Server (ITDS) before 6.0.0.8-TIV-ITDS-IF0006

• http://osvdb.org/66782
• http://secunia.com/advisories/40791
• http://xforce.iss.net/xforce/xfdb/60821
• https://www-304.ibm.com/support/docview.wss?uid=swg1IO12399

---

Updated on 2015-03-25