CVE-2019-3936

The CVE-2019-3936 vulnerability affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2), allowing a remote, unauthenticated attacker to cause a DoS by sending a crafted request to TCP port 389 that forces the slideshow into a stopped state. No exploitation details are provided in...

CVE-2019-3936

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a "stopped" state. A remote, unauthenticated attacker can use this vulnerability to stop an acti...

CVE-2019-3883

In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted requests. Connections using SSL/TLS are not taking this timeout into account during...

CVE-2019-3883

In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted requests. Connections using SSL/TLS are not taking this timeout into account during...

Design/Logic Flaw

In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted requests. Connections using SSL/TLS are not taking this timeout into account during...

CVE-2019-3883

389-ds-base up to 1.4.1.2 is affected by CVE-2019-3883: SSL/TLS reads ignore the ioblocktimeout, allowing an unauthenticated attacker to trigger hanging LDAP requests that can hang all workers and cause a DoS. Affected products include 389-ds-base deployments on various distros (Red Hat/CentOS, D...

EulerOS 2.0 SP2 : 389-ds-base (EulerOS-SA-2019-1046)

According to the version of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - 389-ds-base: ldapsearch with server side sort allows users to cause a crash CVE-2018-10935 Note that Tenable Network Security has extracted th...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service DoS attacks. The vulnerability exists as a flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the dosearch function. An unauthenticated attacker could use this flaw to provoke a denial ...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service DoS attacks. The vulnerability exists as 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could u...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service. A remote unauthenticated attacker is able to crash the application in a buffer overflow using a malicious LDAP request containing long search filters with unescaped characters...

Authentication Bypass

389-ds-base is vulnerable to authentication bypass attacks. The vulnerability exists as it was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service. An invalid pointer dereference flaw was found in the way 389-ds-base handled LDAP bind requests. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service...

Information Leakage

389 Directory Server is vulnerable to an information disclosure. It is possible because a user with no access to objects in certain LDAP sub-tree is not restricted to not to send LDAP ADD operations with a specific object name, resulting in differnt error message returned to the user based on...

Information Disclosure

389-ds-base is vulnerable to information disclosure attacks. The vulnerability exists as 389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the...

Information Disclosure

389-ds-base is vulnerable to information disclosure attacks. The vulnerability exists as Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory...

Privilege Escalation

389-ds-base is vulnerable to privilege escalation attacks. The vulnerability exists as the SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bi...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service DoS attacks. The vulnerability exists as ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...

Information Disclosure

redhat-ds-base is vulnerable to information disclosure attacks. The vulnerability exists as the Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a...

Information Disclosure

389-ds-base is vulnerable to information disclosure attacks. The vulnerability exists as 389 Directory Server before 1.2.11.6 aka Red Hat Directory Server before 8.2.10-3, after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the...

Denial Of Service (DoS)

389 Directory Server is vulnerable to denial of service. The acllashandlegroupentry function in servers/plugins/acl/acllas.c does not properly handle access control instructions ACI that use certificate groups and cause ns-slapd to enter an infinite loop which consumes excessive CPU resources and...