RedHat Update for 389-ds-base RHSA-2012:0813-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for 389-ds-base RHSA-2012:0997-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : 389-ds-base (RHSA-2012:0997)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0997 advisory. - rhds/389: plaintext password disclosure flaw CVE-2012-2678 - rhds/389: plaintext password disclosure in audit log CVE-2012-2746 Note that...

RHEL 6 : 389-ds-base (RHSA-2012:0813)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0813 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...

Microsoft Active Directory缓冲区溢出漏洞(MS11-095)

BUGTRAQ ID: 50959 CVE ID: CVE-2011-3406 活动目录（Active Directory）是面向Windows Standard Server、Windows Enterprise Server以及Windows Datacenter Server的目录服务。 Active Directory在实现上存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windo...

ipa security and bug fix update

2.1.3-9.el6 - Add current password prompt when changing own password in web UI 751179 - Remove extraneous trailing ' from netgroup patch 749352 2.1.3-8.el6 - Updated patch for CVE-2011-3636 to include CR in the HTTP headers. xmlrpc-c in RHEL-6 doesn't suppose the dontadvertise option so that is n...

CVE-2011-1067

slapd aka ns-slapd in 389 Directory Server before 1.2.8.a2 does not properly manage the ctimelimit field of the connection table element, which allows remote attackers to cause a denial of service daemon outage via Simple Paged Results connections, as demonstrated by using multiple processes to...

CVE-2010-4746

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...

CVE-2011-0022

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

CVE-2011-0019

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...

Code injection

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...

Code injection

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...

Directory traversal

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

Design/Logic Flaw

slapd aka ns-slapd in 389 Directory Server before 1.2.8.a2 does not properly manage the ctimelimit field of the connection table element, which allows remote attackers to cause a denial of service daemon outage via Simple Paged Results connections, as demonstrated by using multiple processes to...

CVE-2011-0022

CVE-2011-0022 involves Red Hat Directory Server 1.2.x where setup scripts for multiple unprivileged instances create /var/run/dirsrv with 0777 permissions. This permits a local user to interfere with PID files in that directory, causing a denial of service by replacing PID files or preventing pro...

CVE-2010-4746

The CVE-2010-4746 issue affects 389 Directory Server prior to 1.2.7.5, where multiple memory leaks occur in the normalization path (DN normalization and syntax normalization). The root cause is stated as Slapi_Attr mishandling in the DN normalization code and pointer mishandling in the syntax nor...

CVE-2011-0532

The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...

CVE-2011-0019

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...

CVE-2011-0019

CVE-2011-0019 affects 389 Directory Server / Red Hat Directory Server (Directory Server 1.2.7.5 / 1.2.x) where slapd/ns-slapd mishandles simple paged result searches. The underlying issue is improper handling of Simple Paged Results, allowing remote attackers to trigger a denial-of-service (daemo...

CVE-2011-1067

The CVE-2011-1067 entry affects slapd (389 Directory Server) before 1.2.8.a2. The vulnerability is due to improper handling of the c_timelimit field in the connection table, allowing remote attackers to cause a denial of service (daemon outage/crash) via Simple Paged Results connections (demonstr...