CVE-2014-8763

DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null \0 character and a valid user name, which triggers an unauthenticated bind...

Authentication flaw

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null \0 character, which triggers an anonymous bind...

CVE-2014-8763

DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null \0 character and a valid user name, which triggers an unauthenticated bind...

Authentication flaw

DokuWiki before 2014-05-05b, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a password starting with a null \0 character and a valid user name, which triggers an unauthenticated bind...

CVE-2014-8764

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null \0 character, which triggers an anonymous bind...

UBUNTU-CVE-2014-8764

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null \0 character, which triggers an anonymous bind...

CVE-2014-8764

DokuWiki (pre-2014-05-05a/b) is vulnerable to LDAP/Active Directory authentication bypass via a leading null byte in credentials. CVE-2014-8764 (anonymous bind) and related CVEs (e.g., CVE-2014-8763/8762/8761) are fixed in subsequent updates across distros (Debian DSA-3059, DLA-79-1; Mageia/MGASA...

CVE-2014-8764

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null \0 character, which triggers an anonymous bind...

CVE-2014-8764

DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null \0 character, which triggers an anonymous bind...

supermicro-ipmi-conf NSE Script

Attempts to download an unprotected configuration file containing plain-text user credentials in vulnerable Supermicro Onboard IPMI controllers. The script connects to port 49152 and issues a request for "/PSBlock" to download the file. This configuration file contains users with their passwords ...

Microsoft Active Directory LDAP Server Username Enumeration Weakness

No description provided by source. source: http://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid...

Google AD Sync Tool - Exposure of Sensitive Information Vulnerability

No description provided by source. Sense of Security - Security Advisory - SOS-13-001 Release Date. 03-Apr-2013 Last Update. - Vendor Notification Date. 03-Sep-2012 Product. Google Active Directory Sync GADS Tool Platform. Windows, Linux, Solaris Affected versions. All versions up to 3.1.3 Severi...

MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow

No description provided by source. MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Context: Broadcast,...

Microsoft Windows 2000 Active Directory Remote Stack Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7930/info A vulnerability has been discovered in Microsoft Windows 2000. The problem occurs in the Active Directory component and will result in a denial of service. An unauthenticated attacker could exploit this...

Locations to Check for Incorrect Username/Password Issues

Challenge Jobs fail with an error message indicating an incorrect user name or password. An account associated with Veeam is being locked out in Active Directory. Solution Below are the locations where accounts are configured within Veeam Backup & Replication and Backup Enterprise Manager...

openSUSE Security Update : sssd (openSUSE-SU-2013:0559-1)

When SSSD is configured as an Active Directory client by using the new Active Directory provider or equivalent configuration of the LDAP provider, the Simple Access Provider does not handle access control correctly. If any groups are specified with the simpledenygroups option, the group members a...

CVE-2014-2195

Cisco AsyncOS on Email Security Appliance ESA and Content Security Management Appliance SMA devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085...

Design/Logic Flaw

Cisco AsyncOS on Email Security Appliance ESA and Content Security Management Appliance SMA devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085...

CVE-2014-2195

CVE-2014-2195 affects Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA). When Active Directory is enabled, the software does not properly handle group names, enabling a remote attacker to gain role privileges by exploiting group-name similarity (Bug I...

CVE-2014-2195

Cisco AsyncOS on Email Security Appliance ESA and Content Security Management Appliance SMA devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085...