CVE-2010-4789 Use after free in n/a

Medium 4.0 Published 21 Apr 2011 Updated 16 Sep 2024

Remote authenticated users can crash the IBM Tivoli Directory Server daemon via a specific LDAP search sequence, causing denial of service.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2010-4789?

CVE-2010-4789 is a medium-severity use after free vulnerability in n/a, published on 21 Apr 2011. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation.

Weakness: CWE-399

Which versions are affected by CVE-2010-4789?

It affects 1 product.

Products include Ibm Tivoli Directory Server.

How do I fix CVE-2010-4789?

No fix has been published for CVE-2010-4789 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2010-4789 being exploited?

There is no known exploitation of CVE-2010-4789 in the wild and no public exploit code.

Sources

Also known as GHSA-x43w-pppr-g4w3.