131 matches found
CentOS 3 : openldap / nss_ldap (CESA-2005:751)
Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...
CVE-2006-2069
CVE-2006-2069 affects the PowerDNS Recursor. The vulnerability stems from the recursor’s handling of EDNS0 packets, where malformed EDNS0 data can cause an application crash, yielding a remote denial-of-service condition. Affected software/version: PowerDNS Recursor prior to 3.0.1 (PowerDNS 3.x h...
RHEL 2.1 / 3 : openldap and nss_ldap (RHSA-2005:751)
Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...
nss_ldap, openldap security update
CentOS Errata and Security Advisory CESA-2005:751 Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LD...
RHEL 3 : openssh (RHSA-2005:550)
Updated openssh packages that fix a potential security vulnerability and various other bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This includes the core file...
CVE-2002-2069
CVE-2002-2069 affects PGP 6.x and 7.x on Windows NTFS. The issue is failure to clear Windows alternate data streams attached to files, enabling recovery of deleted sensitive information. Connected Red Hat CVE entry corroborates the same description. No explicit exploit details or affected version...
CVE-2005-2069
The CVE concerns pam_ldap/nss_ldap used with OpenLDAP when the client is referred from a TLS-secured slave to a master; the following connection may not use TLS, allowing passwords to be sniffed. Connected advisories (e.g., Debian DSA-785-1) reference CVE-2005-2069 (and related CVEs) and note upd...
CVE-2004-2069
OpenSSH CVE-2004-2069 affects sshd (OpenSSH 3.6.1p2, 3.7.1p2 and possibly other versions) when privilege separation is enabled. The issue is that the non-privileged process is not properly signaled after a session ends once LoginGraceTime has been exceeded, leaving the connection open and enablin...
CVE-2004-2069
sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to...
CVE-2002-2069
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...