4659 matches found
Authentication flaw
DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...
CVE-2007-6714
DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...
CVE-2008-0088
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...
Cross site request forgery (csrf)
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...
CVE-2008-0088
Summary: CVE-2008-0088 describes a denial-of-service in Microsoft Active Directory and ADAM caused by improper validation of crafted LDAP requests. Affected components include Active Directory on Windows 2000 Server and Windows Server 2003, and ADAM on Windows XP/Server 2003. The underlying root ...
CVE-2008-0088
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...
Microsoft Windows Active Directory LDAP Request Validation Remote Denial Of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability because Microsoft Active Directory and ADAM Active Directory Application Mode fail to handle specially crafted Lightweight Directory Access Protocol LDAP requests. An attacker can exploit this issue to cause the...
Microsoft Security Bulletin MS08-003 – Important Vulnerability in Active Directory Could Allow Denial of Service (946538)
Microsoft Security Bulletin MS08-003 – Important Vulnerability in Active Directory Could Allow Denial of Service 946538 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability in implementations of...
Microsoft Windows Active Directory DoS
Crash on LDAP request handling...
MS08-003: Vulnerability in Active Directory Could Allow Denial of Service (946538)
The remote version of Active Directory contains a flaw in the LDAP request handler code that allows an attacker to crash the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31037; scriptversion"1.28"; scriptcvsdate"Date: 2018/11/15...
Microsoft Active Directory LDAP Query Handling Denial of Service (MS08-003; CVE-2008-0088)
Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. A vulnerability was discovered in Microsoft Active Directory that enables an attacker to cause a Denial-of-Service DoS condition...
JIRA Portlet Macro not displaying when authenticating using the trusted application between JIRA and Confluence
We're having issues using the JIRA portlet macro jiraportlet on pages inside Confluence. Whenever we try to use this macro using the trust between JIRA and Confluence for authentication, the macro does not display on the page. There aren't any errors, it just doesn't appear. code...
Authentication flaw
IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...
CVE-2007-6363
IBM Tivoli Netcool Security Manager 1.3.0 is affected by CVE-2007-6363: before Interim Fix 1, AD LDAP authentication allows remote attackers to obtain login access without a password via unspecified vectors. This impacts authentication bypass with AD LDAP and could permit unauthorized access. A f...
CVE-2007-6363
IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...
CVE-2002-2328
Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service hang via an LDAP client that sets the page length to zero during a large request...
CVE-2002-2328
Technical details for CVE-2002-2328 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates from Red Hat/NVD/CVE sources.
Cisco Unified Communications管理应用程序特权提升漏洞
Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications管理应用程序包含的基于WEB的工具存在访问验证问题，远程攻击者可以利用漏洞访问设备敏感信息和更改应用程序配置。 Cisco Unified ICME, Unified ICMH, UCCE,...
Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability Document ID: 97836 Advisory ID: cisco-sa-20071017-IPCC http://www.cisco.com/warp/public/707/cisco-sa-20071017-IPCC.shtml Revision 1.0 For Public Release 2007...