Design/Logic Flaw

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind...

CVE-2008-5112

The CVE describes an LDAP authentication behavior in Microsoft Windows 2000 SP4 and Server 2003 SP1/SP2, where the Active Directory LDAP server responds differently to failed binds based on whether the user exists and is allowed to login. This enables remote attackers to enumerate valid usernames...

Microsoft Active Directory LDAP Server - 'Username' Enumeration

source: https://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid usernames. This may aid them in...

Microsoft Windows活动目录LDAP请求缓冲区溢出漏洞（MS08-060）

BUGTRAQ ID: 31609 CVECAN ID: CVE-2008-4023 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows 2000 Server上的活动目录实现在接收特制LDAP或LDAPS请求时没有正确地分配内存，如果远程攻击者向服务器发送了特制的LDAP或LDAPS请求的话就可以触发缓冲区溢出，导致执行任意代码。 Microsoft Windows 2000 Server SP4 临时解决方法： 在外围防火墙处阻止TCP 389和636端口。 厂商补丁： Microsoft ---------...

CVE-2008-4023

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for 1 LDAP and 2 LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."...

Buffer overflow

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for 1 LDAP and 2 LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."...

CVE-2008-4023

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for 1 LDAP and 2 LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."...

MS08-060: Microsoft Windows Active Directory LDAP(S) Request Handling Remote Overflow (957280)

The remote version of Active Directory contains a vulnerability when processing LDAP requests. An attacker can exploit this flaw to execute arbitrary code on the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34405; scriptversion"1.28"...

Active Directory Could Allow Remote Code Execution Vulnerability (957280)

This host is missing a critical security update according to Microsoft Bulletin MS08-060. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-4023

The CVE-2008-4023 entry maps to Microsoft Windows 2000 Server SP4 Active Directory. The vulnerability is a memory allocation flaw in the LDAP/LDAPS request handling that can cause a remote code execution when a specially crafted LDAP packet is processed. Impact is remote code execution with full ...

Microsoft Active Directory LDAP Search Request Buffer Overflow (MS08-060; CVE-2008-4023)

Active Directory is an implementation of LDAP directory services by Microsoft. Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. A remote code execution vulnerability has been reported in Microsoft Windows Active...

Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution (957280)

Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution 957280 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in implementations of Active...

Microsoft Windows 2000 Active Directory buffer overflow

Buffer overflow on LDAP request processing...

Microsoft Windows Active Directory LDAP Request Handling Remote Code Execution Vulnerability

Description Microsoft Windows Active Directory is prone to a remote code-execution vulnerability that arises because the application fails to handle specially crafted LDAP or LDAP over SSL LDAPS requests in a proper manner. Successfully exploiting this issue would allow an attacker to execute...

CVE-2008-2329

Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window...

Design/Logic Flaw

Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window...

CVE-2008-2329

CVE-2008-2329 affects Apple Mac OS X 10.5–10.5.4 when Active Directory is used; Directory Services/Login Window allow enumeration of user names via wildcard characters. Impact is user name disclosure with local access, per NVD. OpenVAS references indicate that 10.5.5 Security Update (2008-006) in...

CVE-2008-3539

Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...

HP OpenView Select Identity Connectors本地信息泄漏漏洞

BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID：CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...