CVE-2011-0019

CVE-2011-0019 affects 389 Directory Server / Red Hat Directory Server (Directory Server 1.2.7.5 / 1.2.x) where slapd/ns-slapd mishandles simple paged result searches. The underlying issue is improper handling of Simple Paged Results, allowing remote attackers to trigger a denial-of-service (daemo...

PT-2011-2017

Name of the Vulnerable Software and Affected Versions 389 Directory Server version 1.2.7.5 Description The issue is related to the handling of simple paged result searches by the slapd component in 389 Directory Server. This can be exploited by remote attackers to cause a denial of service,...

PT-2011-2852

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions prior to 1.2.8.a2 Description The issue is related to the improper management of the c timelimit field of the connection table element in the slapd component. This allows remote attackers to cause a denial of...

PT-2011-2426

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.2.x Description The issue concerns the backup and restore scripts, main initialization script, and ldap-agent script in 389 Directory Server. These scripts place a zero-length directory name in the LD LIBRARY...

PT-2011-2020

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.2.x Description The issue allows local users to cause a denial of service, potentially leading to daemon outage or arbitrary process termination, by replacing PID files in the /var/run/dirsrv directory. This is...

CVE-2010-4746: Undefined Security Weakness

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...

CVE-2011-0019: Improper Input Validation

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...

CVE-2011-0022: Undefined Security Weakness

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

CVE-2011-0532: Undefined Security Weakness

The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...

PT-2011-1696

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions prior to 1.2.7.5 Description The issue is related to multiple memory leaks in the normalization functionality, allowing remote attackers to cause a denial of service through memory consumption. This is due to...

CVE-2011-1067: Improper Input Validation

slapd aka ns-slapd in 389 Directory Server before 1.2.8.a2 does not properly manage the ctimelimit field of the connection table element, which allows remote attackers to cause a denial of service daemon outage via Simple Paged Results connections, as demonstrated by using multiple processes to...