1823 matches found
Authentication flaw
A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was...
UBUNTU-CVE-2021-3652
A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was...
CVE-2021-3652
A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was...
CVE-2021-3652
CVE-2021-3652 affects the 389-ds-base LDAP server. Importing asterisk password hashes can cause any password to succeed on authentication, enabling access to accounts with disabled passwords. Public notices show affected products across distributions (Debian 1.4.4.11-2+deb11u1; Amazon Linux 2/ALA...
CVE-2021-3652
A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was...
Mageia: Security Advisory (MGASA-2022-0134)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated 389-ds-base packages fix security vulnerability
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The...
MGASA-2022-0134 Updated 389-ds-base packages fix security vulnerability
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The...
SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:1139-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1139-1 advisory. - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDA...
SUSE-SU-2022:1139-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2022-0918: Fixed a potential denial of service via crafted packet bsc1197275. - CVE-2022-0996: Fixed a mishandling of password expiry bsc1197345...
SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:1100-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1100-1 advisory. - CVE-2022-0918: Fixed a potential denial of service via crafted packet bsc1197275. - CVE-2022-0996: Fixed a mishandling of passwor...
SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:1102-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1102-1 advisory. - CVE-2022-0918: Fixed a potential denial of service via crafted packet bsc1197275. - CVE-2022-0996: Fixed a mishandling of passwor...
openSUSE 15 Security Update : 389-ds (openSUSE-SU-2022:1100-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:1100-1 advisory. - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port t...
SUSE-SU-2022:1102-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2022-0918: Fixed a potential denial of service via crafted packet bsc1197275. - CVE-2022-0996: Fixed a mishandling of password expiry bsc1197345...
SUSE-SU-2022:1100-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2022-0918: Fixed a potential denial of service via crafted packet bsc1197275. - CVE-2022-0996: Fixed a mishandling of password expiry bsc1197345. - Resolved LDAP-Support not working with DHCP by adding required schema bsc1194068 - Resolved...
Security update for 389-ds (important)
openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2022:1100-1 Rating: important References: 1194068 1194084 1197275 1197345 Cross-References: CVE-2022-0918 CVE-2022-0996 CVSS scores: CVE-2022-0918 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-0918...
Fedora: Security Advisory for 389-ds-base (FEDORA-2022-40544b5314)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: 389-ds-base-2.0.15-1.fc34
389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration...
