56 matches found
CVE-2014-3612
CVE-2014-3612 affects Apache ActiveMQ 5.x (JAAS LDAPLoginModule). The vulnerability lets an attacker authenticate with a valid username and an empty password, causing an unauthenticated bind and bypass of authentication. Remediation: upgrade to ActiveMQ 5.10.1 or later (or apply vendor patch) as ...
CVE-2015-6524
The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...
VMware Workstation Authorization Service Denial-of-Service Vulnerability
This vulnerability allows remote attackers to cause a denial-of-service on vulnerable installations of VMWare Workstation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the VMWare Authorization service, which is listening on port 912. By sending a...
Apache ActiveMQ LDAP Authentication Bypass Vulnerability
Apache ActiveMQ is an open source message bus that supports JMS1.1 and J2EE 1.4 specification of the JMS Provider implementation . Apache ActiveMQ is configured to support LDAP servers with unauthenticated authentication mechanisms. A vulnerability in the LDAPLoginModule implementation provided b...
OpenJDK: insecure subject principals set handling (JAAS, 8024306)
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the...
VMware Authorization Service DoS Vulnerability (VMSA-2010-0007) - Windows
VMWare products are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMware Authorization Service Denial of Service Vulnerability (Windows) -Apr10
The host is installed with VMWare products that are vulnerable to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodvmwareprdtsdosvulnwinapr10.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Authorization Service Denial of Service Vulnerability Windows -Apr10 Authors: Antu...
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 2276...
Authorization
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 2276...
VMware Authorization Service User Credential Parsing Denial of Service
A denial of service vulnerability has been reported in the authorization service of some VMware products. The flaw is due to a design error when processing login requests. An attacker can exploit this vulnerability by supplying malicious USER or PASS strings to the target host. Successful...
VMware Authorization Service DoS Vulnerability (CVE-2009-3707) - Windows
VMWare products are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMware Authorization Service Denial of Service Vulnerability (Windows)
The host is installed with VMWare products that are vulnerable to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareauthorizationservicedosvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Authorization Service Denial of Service Vulnerability Windows Authors: Antu...
CVE-2009-3707
CVE-2009-3707 corresponds to a remote denial-of-service in VMware hosted products via a format-string vulnerability in the authentication path. The initial description names VMware Workstation 7.x (before 7.0.1 build 227600) and 6.5.x (before 6.5.4 build 246459), VMware Player 3.x (before 3.0.1 b...
EUVD-2002-0806
Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument...
CVE-2002-0814
CVE-2002-0814 concerns VMware GSX Server 2.0.0 build-2050, where a buffer overflow in the VMware Authorization Service allows remote authenticated users to execute arbitrary code through a long GLOBAL argument. Affected component: VMware Authorization Service within GSX Server 2.0.0. Root cause: ...