102 matches found
CVE-2015-1854
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...
CVE-2015-1854
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...
CVE-2015-1854
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...
CVE-2015-1854
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...
CVE-2015-1854
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...
CVE-2015-1854
CVE-2015-1854 affects 389-ds-base (Directory Server). The flaw allows an unauthenticated attacker to bypass access controls by issuing an ldapmodrdn call, enabling unauthorized modifications of directory entries. Connected sources (Debian DLA-1428, Debian tracker, Amazon ALAS-2015-538, Fedora 201...
Oracle Linux 7 : pidgin (ELSA-2017-1854)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1854 advisory. - Add patch for CVE-2017-2640 Resolves: 1431022 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload
Document Title: =============== Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1854 Release Date: ============= 2016-06-07 Vulnerability Laboratory ID VL-ID: ==================================== 1854...
webkit2gtk: arbitrary code execution
WebKitGTK+ allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856. Credit to Jeonghoon Shin at A.D.D and Liang Chen, Zhen Feng, wushi of KeenLab, Tencen...
CVE-2016-1854
Technical details about CVE-2016-1854 are not publicly provided in the supplied documents. Monitor for updates from authoritative advisories (vendor/standard CVE trackers) for affected products, impact, and remediation.
CVE-2016-1854
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1855, CVE-2016-1856, and CVE-2016-1857...
Mac OS X : Apple Safari < 9.1.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is prior to 9.1.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists due to a failure to completely delete a user's browser history when using the 'Clear History and...
Oracle: Security Advisory (ELSA-2015-0895)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: 389-ds-base
Issue Overview: A flaw was found in the authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. Affected Packages: 389-ds-base Issue...
Fedora 22 : 389-ds-base-1.3.3.10-1.fc22 (2015-7206)
release 1.3.3.10 with a fix for CVE-2015-1854 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Scientific Linux Security Update : Important: 389-Ds-Base Security Update on SL7.x srpm/x86_64
A flaw was found in the way the Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. CVE-2015-1854 After...
CentOS 7 : 389-ds-base (CESA-2015:0895)
Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
Oracle Linux 7 : 389-ds-base (ELSA-2015-0895)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0895 advisory. 1.3.3.1-16 - release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn Tenable has extracted the preceding...
Important: Red Hat Security Advisory: 389-ds-base security update
Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...