Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

UBUNTU-CVE-2018-10548

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service NULL pointer dereference and application crash because of mishandling of the ldapgetdn return value...

IBM Tivoli Identity Manager and Security Identity Manager Access Restriction Bypass Vulnerability

IBM Tivoli Identity Manager and Security Identity Manager are both products of IBM Corporation of the U.S.A. IBM Tivoli Identity Manager is a suite of identity management software used to manage user rights across heterogeneous IT resources.Security Identity Security Identity Manager is an identi...

USN-3614-1 openjdk-7 vulnerabilities

It was discovered that a race condition existed in the cryptography implementation in OpenJDK. An attacker could possibly use this to expose sensitive information. CVE-2018-2579 It was discovered that the LDAP implementation in OpenJDK did not properly encode login names. A remote attacker could...

USN-3613-1 openjdk-8 vulnerabilities

It was discovered that a race condition existed in the cryptography implementation in OpenJDK. An attacker could possibly use this to expose sensitive information. CVE-2018-2579 It was discovered that the Hotspot component of OpenJDK did not properly validate uses of the invokeinterface JVM...

ALPINE-CVE-2018-1000121

A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service...

LDAP NULL pointer dereference

curl might dereference a near-NULL address when getting an LDAP URL. The function ldapgetattributeber is called to get attributes, but it turns out that it can return LDAPSUCCESS and still return a NULL pointer in the result pointer when getting a particularly crafted response. This was a surpris...

Samba Security Bypass Vulnerability (CNVD-2018-07048)

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. A security bypass vulnerability exists in Samba due to an LDAP server on a Samba Active Directory AD Domain Controller DC that does not properly validate privileges when...

ALPINE-CVE-2018-1057

On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts eg Domain Controllers...

DEBIAN-CVE-2018-1057

On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts eg Domain Controllers...

DEBIAN-CVE-2018-1054

An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial ...

PacketFence Injection Vulnerability

PacketFence is an open source network access control solution. A security vulnerability exists in the html/admin/login.php file in versions prior to PacketFence 3.0.2. A remote attacker can exploit this vulnerability with a specially crafted username to perform an LDAP injection attack and bypass...

Red Hat 389-ds-base stack buffer overflow vulnerability

Red Hat 389-ds-base is an American Red Hat package that includes a Linux directory server and a server administration command-line program. A stack buffer overflow vulnerability exists in Red Hat 389-ds-base versions 1.3.6.x prior to 1.3.6.13, 1.3.7.x prior to 1.3.7.9, and 1.4.x prior to 1.4.0.5....

CentOS Update for 389-ds-base CESA-2018:0163 centos7

Check the version of 389-ds-base SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882838";...

389-ds-base: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c

A stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service...

The vulnerability of the XRootD file server arises from the lack of measures to clean incoming data during LDAP requests, allowing an attacker to execute arbitrary code.

The vulnerability of the XRootD file server is related to the lack of measures to sanitize input data when processing LDAP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Debian DSA-4046-1 : libspring-ldap-java - security update

Tobias Schneider discovered that libspring-ldap-java, a Java library for Spring-based applications using the Lightweight Directory Access Protocol, would under some circumstances allow authentication with a correct username but an arbitrary password. %NASLMINLEVEL 70300 C Tenable Network Security...

[SECURITY] [DSA 4046-1] libspring-ldap-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4046-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 22, 2017 https://www.debian.org/security/faq -...

CVE-2017-4927

VMware vCenter Server 6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service...

USN-3457-1 curl vulnerability

Brian Carpenter discovered that curl incorrectly handled IMAP FETCH response lines. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code...