IBM Tivoli Directory Server 6.0.x / 6.1 < 6.1.0.58 / 6.2 < 6.2.0.33 / 6.3 < 6.3.0.25 Javadoc Frame Injection

According to its version, the installation of IBM Tivoli Directory Server on the remote host is 6.0.x or 6.1 6.1.0.58 / 6.2 6.2.0.33 / 6.3 6.3.0.25. It is, therefore, affected by an error related to the included Java version and input-validation that allows an attacker to inject HTML frames into...

EXPP (Doc Number=3577): GSKit Fixes Available

Abstract EXPP Doc Number=3577: GSKit Fixes Available Fixes for GSKit Available See the following Security Bulletin for IBM Tivoli Directory Server CPU utilization - shipped with AIX and VIOS Doc number: 3577 Published date: 20140523 Content EXPP Doc Number=3577: GSKit Fixes Available Fixes for...

EXPP (Doc Number=3578): GSKit Fixes Available

Abstract EXPP Doc Number=3578: GSKit Fixes Available Fixes for GSKit Available See the following Security Bulletin for IBM Tivoli Directory Server CPU utilization - shipped with AIX and VIOS Doc number: 3578 Published date: 20140523 Content EXPP Doc Number=3578: GSKit Fixes Available Fixes for...

EXPP (Doc Number=3579): GSKit Fixes Available

Abstract EXPP Doc Number=3579: GSKit Fixes Available Fixes for GSKit Available See the following Security Bulletin for IBM Tivoli Directory Server CPU utilization - shipped with AIX and VIOS Doc number: 3579 Published date: 20140523 Content EXPP Doc Number=3579: GSKit Fixes Available Fixes for...

RedHat Update for 389-ds-base RHSA-2013:1119-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for 389-ds-base RHSA-2013:1119-01

Check for the Version of 389-ds-base OpenVAS Vulnerability Test RedHat Update for 389-ds-base RHSA-2013:1119-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Updated 389-ds-base package fixes security vulnerability

It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager account. This...

MGASA-2014-0145 Updated 389-ds-base package fixes security vulnerability

It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager account. This...

Amazon Linux AMI : 389-ds-base (ALAS-2014-311)

It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager account. This...

Important: 389-ds-base

Issue Overview: It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager...

CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

DEBIAN-CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

Authentication flaw

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

UBUNTU-CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

CVE-2014-0132

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind...

CVE-2014-0132

CVE-2014-0132 affects 389 Directory Server: SASL authentication can be abused via the authzid parameter in a SASL/GSSAPI bind to connect as an arbitrary user and gain privileges. Mageia advisory MGASA-2014-0145 indicates updated 389-ds-base packages fix this vulnerability; apply the vendor-provid...

389 Directory Server SASL/GSSAPI验证绕过漏洞

Bugtraq ID:66235 CVE ID:CVE-2014-0132 389 Directory Server的前身是Fedora Directory Server，是一个企业级的Linux目录服务器。 当指定"authzid"参数时389 Directory Server不正确处理SASL/GSSAPI验证，允许远程攻击者利用漏洞使用其他用户目录。 0 389 Directory Server formerly known as Fedora Directory Server 1.3.1.20 389 Directory Server formerly known as Fedo...