389-ds-base: Password verification vulnerable to timing attack

It was found that 389 Directory Server was vulnerable to a remote password disclosure via timing attack. A remote attacker could possibly use this flaw to retrieve directory server password after many tries...

389-ds-base: Information disclosure via repeated use of LDAP ADD operation

An information disclosure flaw was found in 389 Directory Server. A user with no access to objects in certain LDAP sub-tree could send LDAP ADD operations with a specific object name. The error message returned to the user was different based on whether the target object existed or not...

PT-2017-8723 · Red Hat +3 · Red Hat Enterprise Linux Desktop +8

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux Desktop versions 6 through 7 Red Hat Enterprise Linux HPC Node versions 6 through 7 Red Hat Enterprise Linux Server versions 6 through 7 Red Hat Enterprise Linux Workstation versions 6 through 7 389 Directory Server...

Red Hat 389 Directory Server Information Disclosure Vulnerability (CNVD-2016-10464)

Red Hat 389 Directory Server is an enterprise-class Linux directory server. A security vulnerability exists in Red Hat 389 Directory Server that allows remote attackers to submit special requests to obtain sensitive information...

[SECURITY] Fedora 23 Update: 389-ds-base-1.3.4.14-1.fc23

389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...

CVE-2015-1977

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server ITDS before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server ISDS before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x...

Directory traversal

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server ITDS before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server ISDS before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x...

CVE-2015-1977

CVE-2015-1977 describes a directory traversal in IBM Tivoli Directory Server (ITDS) and IBM Security Directory Server (ISDS) Web Administration, allowing a remote attacker to read arbitrary files via a URL containing .. sequences. Affected versions: ITDS 6.1.0.73 and earlier; 6.2.0.49 and earlier...

CVE-2015-1977

Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server ITDS before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 and IBM Security Directory Server ISDS before 6.3.1.18-ISS-ISDS-IF0018 and 6.4.x...

Red Hat 389 Directory Server Information Disclosure Vulnerability (CNVD-2016-04980)

Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat. The server fully supports the LDAPv3 specification and features scalability, multi-master replication, and more. An information disclosure vulnerability exists in Red...

IBM Tivoli / Security Directory Server Remote Arbitrary File Viewing Vulnerability

IBM Security Directory Server ISDS, formerly IBM Tivoli Directory Server, ITDS is a suite of enterprise identity management software from IBM in the United States that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for...

The vulnerability of the WebSphere Application Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability in IBM GSKit for IBM Security Directory Server ISDS and Tivoli Directory Server TDS allows malicious actors to cause service failures—such as premature termination of applications or system hangs—by using improperly constructed X.509 certificate chains...

RedHat 389 Directory Server Denial of Service Vulnerability

389 Directory Server is an LDAP server developed by Red Hat. A denial of service vulnerability exists in RedHat 389 Directory Server versions 1.3.4.x 1.3.4.7, slapd/connection.c, which can be exploited by a remote attacker to cause a denial of service via an exceptionally closed connection...

CVE-2016-0741

slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...

DEBIAN-CVE-2016-0741

slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...

Design/Logic Flaw

slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...

CVE-2016-0741

slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...

UBUNTU-CVE-2016-0741

slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...

CVE-2016-0741

Summary: CVE-2016-0741 affects 389-ds-base (389 Directory Server) with a DoS by abnormally closed connections. The vulnerability occurs in slapd/connection.c across 1.3.4.x branches prior to 1.3.4.7, where worker threads fail to detect closed connections, enabling an infinite loop and connection ...

CVE-2016-0741

slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...