2004 matches found
Directory traversal
The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...
Code injection
Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...
Design/Logic Flaw
slapd aka ns-slapd in 389 Directory Server before 1.2.8.a2 does not properly manage the ctimelimit field of the connection table element, which allows remote attackers to cause a denial of service daemon outage via Simple Paged Results connections, as demonstrated by using multiple processes to...
CVE-2010-4746
The CVE-2010-4746 issue affects 389 Directory Server prior to 1.2.7.5, where multiple memory leaks occur in the normalization path (DN normalization and syntax normalization). The root cause is stated as Slapi_Attr mishandling in the DN normalization code and pointer mishandling in the syntax nor...
CVE-2011-0022
CVE-2011-0022 involves Red Hat Directory Server 1.2.x where setup scripts for multiple unprivileged instances create /var/run/dirsrv with 0777 permissions. This permits a local user to interfere with PID files in that directory, causing a denial of service by replacing PID files or preventing pro...
CVE-2011-0019
CVE-2011-0019 affects 389 Directory Server / Red Hat Directory Server (Directory Server 1.2.7.5 / 1.2.x) where slapd/ns-slapd mishandles simple paged result searches. The underlying issue is improper handling of Simple Paged Results, allowing remote attackers to trigger a denial-of-service (daemo...
CVE-2011-0019
slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...
CVE-2011-0532
The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...
CVE-2011-1067
The CVE-2011-1067 entry affects slapd (389 Directory Server) before 1.2.8.a2. The vulnerability is due to improper handling of the c_timelimit field in the connection table, allowing remote attackers to cause a denial of service (daemon outage/crash) via Simple Paged Results connections (demonstr...
CVE-2010-4746
Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...
CVE-2011-0022
The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...
CVE-2011-0532
In Red Hat Directory Server (389 Directory Server 1.2.x / Red Hat Directory Server 8.2.x), three scripts (backup/restore, main init, ldap-agent) place a zero-length entry in LD_LIBRARY_PATH, enabling local privilege escalation via a Trojan horse shared library in the attacker’s directory. This is...
Security fix for the ALT Linux 8 package 389-ds-base version 1.2.7.5-alt3
Feb. 23, 2011 Vitaly Kuznetsov 1.2.7.5-alt3 - CVE-2011-0019...
(0Day) IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The flaw exists within the nLDAP.exe component which listens by default on TCP port 389. When handling the an LDAP Bi...
Security fix for the ALT Linux 8 package 389-ds-base version 1.2.5-alt2
June 17, 2010 Vitaly Kuznetsov 1.2.5-alt2 - CVE-2010-2222...
Novell eDirectory evtFilteredMonitorEventsRequest Function Heap Overflow (CVE-2006-4509)
Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. On a default installation, the eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. A heap buffer overflow vulnerability exists in the Novell eDirectory product line. The flaw is...
Novell eDirectory空Base DN拒绝服务漏洞
Bugraq ID: 36902 Novell eDirectory是一款跨平台的目录服务器。 Novell eDirectory服务器包含的LDAP实现存在缺陷，Novell eDirectory的NDSD进程保定389/TCP端口处理LDAP请求，当服务处理未定义BaseDN的搜索请求时，会停止响应而不能再进行查询或验证。 Novell eDirectory 8.8.2 ftf2 Novell eDirectory 8.8.2 Novell eDirectory 8.8.1 Novell eDirectory 8.7.3 SP10b Novell eDirectory 8.7.3...
Microsoft Windows活动目录LDAP请求远程拒绝服务漏洞（MS08-035）
BUGTRAQ ID: 29584 CVECAN ID: CVE-2008-1445 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的活动目录组件没有正确地验证LDAP请求，如果远程攻击者向ADAM、活动目录或AD LDS服务器发送了特制的LDAP请求报文的话，就可能导致系统停止响应并自动重新启动。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft...
Debian Security Advisory DSA 389-1 (ipmasq)
The remote host is missing an update to ipmasq announced via advisory DSA 389-1. OpenVAS Vulnerability Test $Id: deb3891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 389-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-389)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...