CVE-2010-4216

IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service daemon crash via vectors involving a buffer that has a memory address near the maximum...

Buffer overflow

IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service daemon crash via vectors involving a buffer that has a memory address near the maximum...

Design/Logic Flaw

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service daemon crash via an unbind request that occurs during a certain search operation...

CVE-2010-4217

CVE-2010-4217 affects IBM Tivoli Directory Proxy Server (TDS) and is a use-after-free in the proxy server. The vulnerability allows remote attackers to cause a daemon crash (DoS) by sending an unbind request during a certain search operation. Affected versions are TDS 6.0.0.x before 6.0.0.8-TIV-I...

CVE-2010-4216

CVE-2010-4216 concerns IBM Tivoli Directory Server (TDS) 6.0.0.x prior to 6.0.0.8-TIV-ITDS-IF0007. The vulnerability arises from improper handling of invalid buffer references in LDAP BER requests, which can allow a remote attacker to trigger a denial of service (daemon crash) via vectors involvi...

CVE-2010-4216

IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service daemon crash via vectors involving a buffer that has a memory address near the maximum...

CVE-2010-4217

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service daemon crash via an unbind request that occurs during a certain search operation...

Security feature bypass

Unspecified vulnerability in the Directory Server Enterprise Edition component in Oracle Sun Products Suite 6.0, 6.1, 6.2, and 6.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Identity Synchronization for Windows...

CVE-2010-3535

CVE-2010-3535 affects the Directory Server Enterprise Edition component of Oracle Sun Product Suite (versions 6.0–6.3). The vulnerability is described as unspecified and exploitable via Identity Synchronization for Windows, with potential impact to confidentiality, integrity, and availability. Th...

[security bulletin] HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02522633 Version: 1 HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation NOTICE: The information in...

HP-UX Directory Server / Red Hat Directory Server multiple security vulnerabilities

Information leak, privilege escalation...

HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587

Check for the Version of Directory Server and Red Hat Directory Server for HP-UX OpenVAS Vulnerability Test HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587

Check for the Version of Directory Server and Red Hat Directory Server for HP-UX OpenVAS Vulnerability Test HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Sun Directory Server LDAP Denial of Service (CVE-2006-0647)

Sun Directory Server is a distributed directory server based on the Lightweight Directory Access Protocol LDAP. The server listens for LDAP requests on a port specified during installation. The default port assigned to the server during installation is randomly selected. There exists a...

CVE-2010-2241

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

Design/Logic Flaw

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2241

CVE-2010-2241 affects Red Hat Directory Server up to version 8.1.x (before 8.2). The vulnerable component comprises the setup-ds.pl and setup-ds-admin.pl setup scripts, which create cache files with world-readable permissions. This underprivileged exposure allows a local user to obtain sensitive ...

CVE-2010-2241

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

redhat-ds: setup script insecure .inf file permissions

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2927

The slapiprintmessage function in IBM Tivoli Directory Server ITDS before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service daemon crash via multiple incomplete DIGEST-MD5 connection attempts...