Mandriva Update for openldap MDVSA-2010:026 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2010:026 openldap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openldap MDVSA-2010:026 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2010:026 openldap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : openldap (MDVSA-2010:026)

A vulnerability was discovered and corrected in openldap : libraries/libldap/tlso.c in OpenLDAP, when OpenSSL is used, does not properly handle a '' NUL character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof...

Debian Security Advisory DSA 1943-1 (openldap openldap2.3)

The remote host is missing an update to openldap openldap2.3 announced via advisory DSA 1943-1. OpenVAS Vulnerability Test $Id: deb19431.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1943-1 openldap openldap2.3 Authors: Thomas Reinke Copyright: Copyright ...

Debian: Security Advisory (DSA-1943-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:308)

Multiple vulnerabilities has been found and corrected in gnutls : gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related ...

[SECURITY] [DSA 1943-1] New openldap2.3/openldap packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1943 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 02, 2009 http://www.debian.org/security/faq -...

DSA-1943-1 openldap openldap2.3 - SSL certificate

Bulletin has no description...

Ubuntu USN-858-1 (openldap2.2)

The remote host is missing an update to openldap2.2 announced via advisory USN-858-1. OpenVAS Vulnerability Test $Id: ubuntu8581.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8581.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-858-1 openldap2.2 Authors:...

OpenLDAP certificate spoofing

zero byte in common name is handled incorrectly...

[USN-858-1] OpenLDAP vulnerability

=========================================================== Ubuntu Security Notice USN-858-1 November 12, 2009 openldap2.2 vulnerability CVE-2009-3767 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory...

Ubuntu 6.06 LTS : openldap2.2 vulnerability (USN-858-1)

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracte...

USN-858-1: OpenLDAP vulnerability

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities

Binary data 800795.prm...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ============================================================= OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability ============================================================= Title: OpenLDAP 2.3.39 MODRDN Remote Denial of Service...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

No description provided by source. Attackers use readily available LDAP commands to exploit this issue. The following command demonstrates this issue: ldapmodrdn -x -h :389 -D dn -w pw -e \noop ou=test,dc=my-domain,dc=com ou=test2...

OpenLDAP 2.3.39 - MODRDN Remote Denial of Service

OpenLDAP 2.3.39 - MODRDN Remote Denial of Service Attackers use readily available LDAP commands to exploit this issue. source: https://www.securityfocus.com/bid/27778/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate...

Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...

OpenLDAP 2.3.39 - MODRDN Remote Denial of Service

Attackers use readily available LDAP commands to exploit this issue. source: https://www.securityfocus.com/bid/27778/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users. OpenLDAP 2.3.39 is vulnerable to this issu...

OpenLDAP CA SSL证书验证漏洞

CVE ID: CVE-2009-3767 OpenLDAP是一款开放源代码的轻量级目录访问协议（LDAP）实现。 在使用OpenSSL的时候，OpenLDAP的libraries/libldap/tlso.c库没有正确地处理X.509证书主题通用名称（CN）字段域名中的空字符（\0），在处理包含有空字符的证书字段时错误地将空字符处理为截止字符，因此只会验证空字符前的部分。例如，对于类似于以下的名称： example.com\0.haxx.se 证书是发布给haxx.se的，但/tlso.c库错误的验证给example.com，这有助于攻击者通过中间人攻击执行网络钓鱼等欺骗。...