2415 matches found
CVE-2011-1081
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...
CVE-2011-1025
OpenLDAP 2.4.x with the back-ndb backend is vulnerable to CVE-2011-1025: bind.cpp in back-ndb allows remote attackers to bypass access restrictions by supplying any password when binding as the root DN, without authentication. Affected: OpenLDAP 2.4.x before 2.4.24. Impact: possible unauthorized ...
CVE-2011-1081
OpenLDAP OpenLDAP 2.4.x is affected by CVE-2011-1081 due to a flaw in modrdn.c (slapd) that allows a remote attacker to crash the daemon via a MODRDN request with an empty OldDN value. Impact per the description is a Denial of Service (daemon crash). The issue is tied to OpenLDAP 2.4.x prior to 2...
CVE-2011-1025
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...
CVE-2011-1024
chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...
CVE-2011-1081
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...
CVE-2011-1025
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...
RedHat Update for openldap RHSA-2011:0346-01
Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2011:0346-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
RedHat Update for openldap RHSA-2011:0346-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RHEL 5 : openldap (RHSA-2011:0346)
Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
RHEL 6 : openldap (RHSA-2011:0347)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0347 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. A flaw was found in the w...
openldap: DoS when submitting special MODRDN request
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...
openldap: rootpw not verified via slapd.conf when using the NDB backend
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...
Moderate: Red Hat Security Advisory: openldap security update
Updated openldap packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
openldap: forwarded bind failure messages cause success
chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...
openldap: forwarded bind failure messages cause success
chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...
Moderate: Red Hat Security Advisory: openldap security and bug fix update
Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
openldap security update
2.4.19-15.2 - fix: security - DoS when submitting special MODRDN request 680975 2.4.19-15.1 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success - fix: CVE-2011-1025 rootpw is not verified for ndb backend...
openldap security and bug fix update
2.3.43-12.7 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 2.3.43-12.6 - fix: slapd concurrent access to connections causes slapd to silently die 677611...
FreeBSD Ports: openldap-server
The remote host is missing an update to the system as announced in the referenced advisory. VID be3dfe33-410b-11e0-9e02-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID be3dfe33-410b-11e0-9e02-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...