$ cve CVE-2011-1206 JSON

CVE-2011-1206 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 15.7% (pctl 97)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) allows remote attackers to execute arbitrary code via a crafted LDAP request. NOTE: some of these details are obtained from third party information.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	15.72% — more likely to be exploited than 97% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2011-04-21
Last modified	2026-06-16

Affected (1)

Vendor	Product
ibm	tivoli directory server

Public exploits

Source	Title	Date
exploit-db	IBM Tivoli Directory Server SASL - Bind Request Remote Code Execution	2011-04-19

References

→ the Explorer · watch your stack · NVD