2279 matches found
DEBIAN-CVE-2013-1897
The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...
Information disclosure
The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...
UBUNTU-CVE-2013-1897
The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...
CVE-2013-1897
CVE-2013-1897 affects 389-ds-base (389 Directory Server) prior to 1.2.11.20 and 1.3.x prior to 1.3.0.5. The do_search in ldap/servers/slapd/search.c fails to restrict anonymous access when nsslapd-allow-anonymous-access is rootdse and the BASE scope is used, enabling remote attackers to view info...
CVE-2013-1897
The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...
IBM Tivoli Directory Server 6.2 < 6.2.0.29 / 6.3 < 6.3.0.21 SSL / TLS DoS
According to its version, the installation of IBM Tivoli Directory Server on the remote host is 6.2.x prior to 6.2.0.29 or 6.3.x prior to 6.3.0.21. It is, therefore, affected by a denial of service vulnerability. It is possible for a connection to fail to time-out while waiting for incoming data...
RedHat Update for 389-ds-base RHSA-2013:0742-01
Check for the Version of 389-ds-base OpenVAS Vulnerability Test RedHat Update for 389-ds-base RHSA-2013:0742-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
CentOS Update for 389-ds-base CESA-2013:0742 centos6
Check for the Version of 389-ds-base OpenVAS Vulnerability Test CentOS Update for 389-ds-base CESA-2013:0742 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
CentOS Update for 389-ds-base CESA-2013:0742 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...
Low: 389-ds-base
Issue Overview: It was found that the 389 Directory Server did not properly restrict access to entries when the "nsslapd-allow-anonymous-access" configuration setting was set to "rootdse". An anonymous user could connect to the LDAP database and, if the search scope is set to BASE, obtain access ...
RHEL 6 : 389-ds-base (RHSA-2013:0742)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0742 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...
389-ds: unintended information exposure when rootdse is enabled
The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...
Fedora Update for 389-ds-base FEDORA-2013-4578
Check for the Version of 389-ds-base OpenVAS Vulnerability Test Fedora Update for 389-ds-base FEDORA-2013-4578 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
[SECURITY] Fedora 18 Update: 389-ds-base-1.3.0.5-1.fc18
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
CVE-2013-0556: IBM Tivoli Directory Server SSL/TLS denial of service
The CVE-2013-0556 issue affects IBM Tivoli Directory Server. Connected data show that vulnerable versions are IBM Tivoli Directory Server 6.2.x prior to 6.2.0.29 and 6.3.x prior to 6.3.0.21. It describes a denial-of-service condition where a TLS/SSL connection can fail to time out while waiting f...
CVE-2013-0336
The ipapwdchpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipapwdextop.c in the directory server dirsrv in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service crash via a connection request without a username/dn, related to the 389 directory server...
CVE-2013-0312
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...
DEBIAN-CVE-2013-0312
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...