360 matches found
ALPINE-CVE-2020-1746
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldapattr and ldapentry community modules are used. The issue...
UBUNTU-CVE-2020-1746
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldapattr and ldapentry community modules are used. The issue...
Samba Resource Management Error Vulnerability (CNVD-2020-32369)
Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A resource management error...
PT-2020-13069
Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.50 Description The issue arises from LDAP search filters with nested boolean expressions, which can cause a denial of service daemon crash in the slapd component of OpenLDAP. Recommendations For versions prior to...
The vulnerability of the Cyrus SASL user authentication method, related to writing beyond the buffer memory boundary, allows a attacker to cause a service denial.
The vulnerability of the Cyrus SASL user authentication method is related to improper operation of the LDAP protocol. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the LDAP dirsync component in the Samba networking software allows a hacker to induce a service failure.
The vulnerability of the LDAP dirsync component in the Samba networking software package involves a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause service failures...
Improper LDAPS Certificate Validation in Hitachi Ops Center Common Services
Overview Improper certificate validation in Hitachi Ops Center Common Services. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
OpenLDAP Integer Overflow Vulnerability
OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States. A numeric error vulnerability exists in OpenLDAP version 2.4. The vulnerability arises from a network system or product not properly calculating or...
Telos Automated Message Handling System Cross-Site Scripting Vulnerability (CNVD-2020-04116)
Telos Automated Message Handling System AMHS is an automated message handling system that enables automated Web-based distribution and management of enterprise-wide organizational messages. A cross-site scripting vulnerability exists in the LDAP cbURL parameter in Telos Automated Message Handling...
CVE-2019-1697
A vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial ...
The vulnerability of the Kerberos authentication protocol, related to the use of the NULL pointer pointer, allows a attacker to cause a service denial.
The vulnerability of the Kerberos authentication protocol is related to the assignment of the NULL pointer, which leads to the inability to add users to the LDAP database. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
PT-2019-1560 · Cisco · Firepower 9300 Security Appliance +10
Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75 Cisco NX-OS Software versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75 Firepower 4100 Series Next-Generation Firewalls versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1....
PT-2019-1559 · Cisco · Nexus 7000 Series Switches +12
Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75 Cisco NX-OS Software versions prior to 7.03I71 on Nexus 3000 Series Switches Cisco NX-OS Software versions prior to 7.03I72 on Nexus 3500 Platform Switches Cisco NX-OS...
The vulnerability of the `ldap_get_dn` function in the PHP interpreter, related to a pointer dereferencing error, allows attackers to trigger a denial-of-service attack.
The vulnerability of the ldapgetdn function ext/ldap/ldap.c in the PHP interpreter is related to incorrect handling of the returned value when processing specially crafted LDAP server responses. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Samba AD DC LDAP Server Denial of Service Vulnerability
Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The software supports sharing printers, transferring data files to each other, etc. AD DC LDAP Server is one o...
curl: LDAP NULL pointer dereference
A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldapgetattributeber function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply...
UBUNTU-CVE-2018-1140
A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable...
DEBIAN-CVE-2018-1337
In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS layer has been established, if the connection has already been used and put back in a pool of connections, leading to leaking any informati...
OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)
It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class...
OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)
It was discovered that the LDAP component of OpenJDK failed to properly encode special characters in user names when adding them to an LDAP search query. A remote attacker could possibly use this flaw to manipulate LDAP queries performed by the LdapLoginModule class...