[security bulletin] HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02522633 Version: 1 HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation NOTICE: The information in...

HP-UX Directory Server / Red Hat Directory Server multiple security vulnerabilities

Information leak, privilege escalation...

HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587

Check for the Version of Directory Server and Red Hat Directory Server for HP-UX OpenVAS Vulnerability Test HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587

Check for the Version of Directory Server and Red Hat Directory Server for HP-UX OpenVAS Vulnerability Test HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Sun Directory Server LDAP Denial of Service (CVE-2006-0647)

Sun Directory Server is a distributed directory server based on the Lightweight Directory Access Protocol LDAP. The server listens for LDAP requests on a port specified during installation. The default port assigned to the server during installation is randomly selected. There exists a...

CVE-2010-2241

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

Design/Logic Flaw

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2241

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2241

CVE-2010-2241 affects Red Hat Directory Server up to version 8.1.x (before 8.2). The vulnerable component comprises the setup-ds.pl and setup-ds-admin.pl setup scripts, which create cache files with world-readable permissions. This underprivileged exposure allows a local user to obtain sensitive ...

redhat-ds: setup script insecure .inf file permissions

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2927

The slapiprintmessage function in IBM Tivoli Directory Server ITDS before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service daemon crash via multiple incomplete DIGEST-MD5 connection attempts...

Denial of service

The slapiprintmessage function in IBM Tivoli Directory Server ITDS before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service daemon crash via multiple incomplete DIGEST-MD5 connection attempts...

CVE-2010-2927

The slapiprintmessage function in IBM Tivoli Directory Server ITDS before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service daemon crash via multiple incomplete DIGEST-MD5 connection attempts...

CVE-2010-2927

The vulnerability CVE-2010-2927 affects IBM Tivoli Directory Server (ITDS) prior to 6.0.0.8-TIV-ITDS-IF0006. The issue lies in the slapi_printmessage function, which can be triggered by multiple incomplete DIGEST-MD5 connection attempts, leading to a denial of service (daemon crash). The availabl...

IBM Tivoli Directory Server ldapinst.log DB2 Admin Password Disclosure

The remote installation of Tivoli Directory Server created a file called 'ldapinst.log' that contains the login and password of the IBM DB2 database used for this service. An attacker who could get access to this file or a backup of it would be able to log into the DB2 database and modify its...

(RHSA-2010:0452) Low: Red Hat Directory Server 7.1 - End of Life Notice

On June 7, 2010, per the life-cycle support policy, version 7.1 of Red Hat Directory Server will exit Production Phase 2, marking the end of its support by Red Hat. Please reference the support policy here: https://www.redhat.com/security/updates/directory/ For migration planning, please note the...

Mandriva Update for mandriva-doc MDVA-2010:151 (mandriva-doc)

Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:151 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for mandriva-doc MDVA-2010:151 (mandriva-doc)

Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:151 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability

ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-074 April 13, 2010 -- CVE ID: CVE-2010-0897 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Directory Server -...

ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability

ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-073 April 13, 2010 -- CVE ID: CVE-2010-0897 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Directory Server...