Lucene search
+L

2279 matches found

OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.107 views

CentOS Update for 389-ds-base CESA-2013:1119 centos6

Check for the Version of 389-ds-base OpenVAS Vulnerability Test CentOS Update for 389-ds-base CESA-2013:1119 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

4CVSS6.4AI score0.01756EPSS
SaveExploits0References2
OSV
OSV
added 2013/07/31 1:20 p.m.10 views

CVE-2013-2219

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

5.6AI score
SaveExploits0References3
OSV
OSV
added 2013/07/31 1:20 p.m.4 views

DEBIAN-CVE-2013-2219

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

4CVSS6AI score0.01756EPSS
SaveExploits0References1
NVD
NVD
added 2013/07/31 1:20 p.m.22 views

CVE-2013-2219

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

4CVSS5.6AI score0.01756EPSS
SaveExploits0References3
Prion
Prion
added 2013/07/31 1:20 p.m.18 views

Design/Logic Flaw

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

4CVSS6AI score0.01756EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2013/07/31 10:0 a.m.94 views

CVE-2013-2219

The CVE affects Red Hat Directory Server and its open source equivalent, 389 Directory Server. The root cause is improper enforcement of access controls for attributes during search filter evaluation, enabling remote authenticated users to retrieve values of restricted attributes via a query. The...

4CVSS5.6AI score0.01756EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2013/07/31 10:0 a.m.20 views

CVE-2013-2219

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

5.5AI score0.01756EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2013/07/31 10:0 a.m.26 views

CVE-2013-2219

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

4CVSS5.6AI score0.01756EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2013/07/31 12:0 a.m.30 views

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130730)

It was discovered that the 389 Directory Server did not honor defined attribute access controls when evaluating search filter expressions. A remote attacker with permission to query the Directory Server could use this flaw to determine the values of restricted attributes via a series of search...

4CVSS5.4AI score0.01756EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/07/31 12:0 a.m.30 views

RHEL 6 : 389-ds-base (RHSA-2013:1119)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1119 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...

4CVSS5.7AI score0.01756EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2013/07/31 12:0 a.m.34 views

CentOS 6 : 389-ds-base (CESA-2013:1119)

Updated 389-ds-base packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

4CVSS5.6AI score0.01756EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2013/07/30 6:55 p.m.67 views

389 security update

CentOS Errata and Security Advisory CESA-2013:1119 Updated 389-ds-base packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...

4CVSS5.8AI score0.01756EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2013/07/30 4:9 a.m.10 views

Server: ACLs inoperative in some search scenarios

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

4CVSS5.8AI score0.01756EPSS
SaveExploits0References4
Fedora
Fedora
added 2013/06/13 6:11 a.m.32 views

[SECURITY] Fedora 17 Update: 389-ds-base-1.2.11.21-1.fc17

389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...

5CVSS3.3AI score0.02727EPSS
SaveExploits0
NVD
NVD
added 2013/05/28 4:55 p.m.31 views

CVE-2013-0599

IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...

5CVSS5.7AI score0.02112EPSS
SaveExploits0References3
Prion
Prion
added 2013/05/28 4:55 p.m.17 views

Code injection

IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...

5CVSS6.3AI score0.02112EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2013/05/28 4:0 p.m.64 views

CVE-2013-0599

The CVE-2013-0599 issue centers on the IBM Eclipse Help System (IEHS) used across IBM products (e.g., Data Studio, OmniFind/Content Analytics, WebSphere-related offerings). A remote attacker can obtain sensitive information by requesting a crafted parameter path or URL, which can trigger error me...

5CVSS8.6AI score0.02112EPSS
SaveExploits0References3Affected Software1
securityvulns
securityvulns
added 2013/05/27 12:0 a.m.39 views

HP-UX Directory Server informaton leakage

No description provided...

2.1CVSS1.7AI score0.01329EPSS
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2013/05/27 12:0 a.m.59 views

[security bulletin] HPSBUX02881 SSRT101189 rev.1 - HP-UX Directory Server, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03772083 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03772083 Version: 1 HPSBUX02881...

2.1CVSS0.5AI score0.01329EPSS
SaveExploits0
OSV
OSV
added 2013/05/13 11:55 p.m.5 views

CVE-2013-1897

The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...

5.8AI score
SaveExploits0References6
Rows per page
Query Builder