DEBIAN-CVE-2017-2591

389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniquenessentrytoconfig function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap...

CVE-2017-2591

389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniquenessentrytoconfig function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap...

UBUNTU-CVE-2017-2591

389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniquenessentrytoconfig function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap...

CVE-2017-2591

389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniquenessentrytoconfig function in the "attribute uniqueness" plugin of 389 Directory Server. An authenticated, or possibly unauthenticated, attacker could use this flaw to force an out-of-bound heap...

Configuration, Command, and File Reference - Red Hat Directory Server 10 Configuration, Command, and File Reference

No description provided...

CVE-2015-1975

The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument...

CVE-2015-1975

CVE-2015-1975 affects IBM Tivoli Directory Server (versions 6.0–6.3) and IBM Security Directory Server (6.3.1–6.4). The web administration tool is vulnerable to argument-injection vectors that allow a locally authenticated user to escalate privileges. Affected fixes are IBM iFixes: 6.0 iFix 75; 6...

CVE-2015-1975

The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, and 6.3 before iFix 37 and IBM Security Directory Server 6.3.1 before iFix 11 and 6.4 before iFix 2 allows local users to gain privileges via vectors related to argument...

The vulnerability of the javax.naming.directory.AttributeInUseException class in the Virtual Member Manager component of the WebSphere Application Server server allows a attacker to gain access to the application.

The vulnerability of the javax.naming.directory.AttributeInUseException class in the Virtual Member Manager component of the WebSphere Application Server server is related to errors that occur during password updates using the IBM Tivoli Directory Server. Exploiting this vulnerability can allow a...

389 security update

CentOS Errata and Security Advisory CESA-2018:0515 An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS Update for 389-ds-base CESA-2018:0414 centos7

Check the version of 389-ds-base SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882851";...

389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c

It was found that 389-ds-base did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances...

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CentOS 7 : 389-ds-base (CESA-2018:0414)

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Solaris 10 (sparc) : 113859-04

SunOS 5.9 5.10: Sun ONE Directory Server 5.1 patch. Date this patch was last updated by Sun : Mar/15/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

Solaris 10 (x86) : 114273-04

SunOS 5.9x86 5.10x86: Sun ONE Directory Server 5.1 patch. Date this patch was last updated by Sun : Mar/15/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Red Hat 389-ds-base Denial of Service Vulnerability

Red Hat 389-ds-base is an American Red Hat package that includes a Linux directory server and a server administration command-line program. A security vulnerability exists in Red Hat 389-ds-base. A remote attacker could exploit this vulnerability by sending specially crafted LDAP requests to caus...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20180306)

Security Fixes : - 389-ds-base: remote Denial of Service DoS via search filters in SetUnicodeStringFromUTF8 in collate.c CVE-2018-1054 - 389-ds-base: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c CVE-2017-15135 Bug Fixes : - Previously, if an administrato...

MGASA-2018-0162 Updated 389-ds-base packages fix CVE-2018-1054

389-ds-base has been updated to fix a security issue. A flaw was found in 389 Directory Server that affects all versions. An improper handling of the search feature with an extended filter, when read access on is enabled, in SetUnicodeStringFromUTF8 function in collate.c, can lead to out-of-bound...

DEBIAN-CVE-2018-1054

An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial ...