525 matches found
Slackware Advisory SSA:2004-154-01 mod_ssl
The remote host is missing an update as announced via advisory SSA:2004-154-01. OpenVAS Vulnerability Test $Id: esoftslkssa200415401.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
bind-dyndb-ldap: named DoS via DNS query with $ in name
The dnstoldapdnescape function in src/ldapconvert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names DN for LDAP queries, which allows remote DNS servers to cause a denial of service named service hang via a "$" character in a DN in a DNS query...
PT-2012-4704
Name of the Vulnerable Software and Affected Versions bind-dyndb-ldap version 1.1.0rc1 and earlier Description The issue arises from the dns to ldap dn escape function in src/ldap convert.c, which fails to properly escape distinguished names DN for LDAP queries. This allows remote DNS servers to...
RHEL 6 : rsyslog (RHSA-2012:0796)
Updated rsyslog packages that fix one security issue, multiple bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
CentOS 6 : bind-dyndb-ldap (CESA-2012:0683)
An updated bind-dyndb-ldap package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
PT-2014-2241
Name of the Vulnerable Software and Affected Versions bind-dyndb-ldap versions prior to 1.1.0rc1 Description The issue arises from the handle connection error function in ldap helper.c, which fails to properly handle LDAP query errors. This can be exploited by remote attackers to cause a denial o...
PT-2011-1326
Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server versions prior to 6.0.0.61 Description A memory leak issue exists in the ldap explode dn function, allowing remote authenticated users to cause a denial of service by consuming memory via an empty string argument...
CVE-2011-1081
OpenLDAP OpenLDAP 2.4.x is affected by CVE-2011-1081 due to a flaw in modrdn.c (slapd) that allows a remote attacker to crash the daemon via a MODRDN request with an empty OldDN value. Impact per the description is a Denial of Service (daemon crash). The issue is tied to OpenLDAP 2.4.x prior to 2...
CVE-2011-1025
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...
openldap: rootpw not verified via slapd.conf when using the NDB backend
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...
PT-2011-1104
Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.24 OpenLDAP versions 2.4.19 OpenLDAP version 2.4.35 and earlier Description The issue affects the confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be...
Code injection
Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...
CVE-2010-4746
Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...
PT-2011-1696
Name of the Vulnerable Software and Affected Versions 389 Directory Server versions prior to 1.2.7.5 Description The issue is related to multiple memory leaks in the normalization functionality, allowing remote attackers to cause a denial of service through memory consumption. This is due to...
CVE-2010-4746: Undefined Security Weakness
Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...
eDirectory < 8.8.5 ftf1/8.7.3.10 ftf2 NULL Base DN DoS
Binary data 5226.prm...
Novell eDirectory DoS
Hang on LDAP request with undefined Base DN...
Novell eDirectory空Base DN拒绝服务漏洞
Bugraq ID: 36902 Novell eDirectory是一款跨平台的目录服务器。 Novell eDirectory服务器包含的LDAP实现存在缺陷，Novell eDirectory的NDSD进程保定389/TCP端口处理LDAP请求，当服务处理未定义BaseDN的搜索请求时，会停止响应而不能再进行查询或验证。 Novell eDirectory 8.8.2 ftf2 Novell eDirectory 8.8.2 Novell eDirectory 8.8.1 Novell eDirectory 8.7.3 SP10b Novell eDirectory 8.7.3...
SOL3631 - Stack-based buffer overflow in Apache - CAN-2004-0488
Vulnerability description and product information: Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code by way of a client certificate with a long...
