RHEL 7 : 389-ds-base (RHSA-2021:3807)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3807 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server an...

Low: Red Hat Security Advisory: 389-ds-base security and bug fix update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was...

Updated 389-ds-base packages fix security vulnerability

Fixed crypt handling of locked accounts. CVE-2021-3652...

MGASA-2021-0440 Updated 389-ds-base packages fix security vulnerability

Fixed crypt handling of locked accounts. CVE-2021-3652...

Huawei EulerOS: Security Advisory for slapi-nis (EulerOS-SA-2021-2448)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : slapi-nis (EulerOS-SA-2021-2448)

According to the version of the slapi-nis package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash t...

EulerOS 2.0 SP5 : slapi-nis (EulerOS-SA-2021-2348)

According to the version of the slapi-nis package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an...

Huawei EulerOS: Security Advisory for slapi-nis (EulerOS-SA-2021-2348)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : 389-ds (openSUSE-SU-2021:1211-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1211-1 advisory. - 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed CVE-2021-3652 Note that Nessus has not tested for this issue but...

openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:1211-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1211-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - Update to version 1.4.3.24 - CVE-2021-3652: Fixed crypt handling of locked accounts. bsc1188455 This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for 389-ds (moderate)

openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2021:1211-1 Rating: moderate References: 1188455 Cross-References: CVE-2021-3652 CVSS scores: CVE-2021-3652 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.2 An update that...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2021:2857-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:2857-1 advisory. - Update to version 1.4.3.24 - CVE-2021-3652: Fixed crypt handling of locked accounts. bsc1188455 Tenable has extracted the preceding description block...

SUSE-SU-2021:2857-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - Update to version 1.4.3.24 - CVE-2021-3652: Fixed crypt handling of locked accounts. bsc1188455...

openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:2801-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2021:2801-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:2801-1 advisory. - Update to 1.4.4.16 - CVE-2021-3652: Fixed crypt handling of locked accounts. bsc1188455 Tenable has extracted the preceding description block directl...

OPENSUSE-SU-2021:2801-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - Update to 1.4.4.16 - CVE-2021-3652: Fixed crypt handling of locked accounts. bsc1188455...

SUSE-SU-2021:2801-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - Update to 1.4.4.16 - CVE-2021-3652: Fixed crypt handling of locked accounts. bsc1188455...

Security update for 389-ds (moderate)

openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2021:2801-1 Rating: moderate References: 1188151 1188455 Cross-References: CVE-2021-3652 CVSS scores: CVE-2021-3652 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 An...