CVE-2011-0532

The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...

CVE-2011-0022

CVE-2011-0022 involves Red Hat Directory Server 1.2.x where setup scripts for multiple unprivileged instances create /var/run/dirsrv with 0777 permissions. This permits a local user to interfere with PID files in that directory, causing a denial of service by replacing PID files or preventing pro...

CVE-2011-1067

The CVE-2011-1067 entry affects slapd (389 Directory Server) before 1.2.8.a2. The vulnerability is due to improper handling of the c_timelimit field in the connection table, allowing remote attackers to cause a denial of service (daemon outage/crash) via Simple Paged Results connections (demonstr...

CVE-2011-0019

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...

CVE-2011-0532

In Red Hat Directory Server (389 Directory Server 1.2.x / Red Hat Directory Server 8.2.x), three scripts (backup/restore, main init, ldap-agent) place a zero-length entry in LD_LIBRARY_PATH, enabling local privilege escalation via a Trojan horse shared library in the attacker’s directory. This is...

CVE-2010-4746

The CVE-2010-4746 issue affects 389 Directory Server prior to 1.2.7.5, where multiple memory leaks occur in the normalization path (DN normalization and syntax normalization). The root cause is stated as Slapi_Attr mishandling in the DN normalization code and pointer mishandling in the syntax nor...

CVE-2011-0022

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

CVE-2010-4746

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service memory consumption via "badly behaved applications," related to 1 SlapiAttr mishandling in the DN normalization code and 2 pointer mishandling in the...

CVE-2011-0019

CVE-2011-0019 affects 389 Directory Server / Red Hat Directory Server (Directory Server 1.2.7.5 / 1.2.x) where slapd/ns-slapd mishandles simple paged result searches. The underlying issue is improper handling of Simple Paged Results, allowing remote attackers to trigger a denial-of-service (daemo...

Server: crash with multiple simple paged result searches

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...

Server: use of insecure LD_LIBRARY_PATH settings

The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...

Server: insecure pid file directory permissions

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

The host is running IBM Tivoli Directory Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmtivolidirserverdigestmd5dosvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability Authors: Sooraj KS...

IBM Tivoli Directory Server LDAP BER Denial of Service Vulnerability

The host is running IBM Tivoli Directory Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmtivolidirserverberldapdosvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ IBM Tivoli Directory Server LDAP BER Denial of Service Vulnerability Authors: Sooraj KS...

IBM Tivoli Directory Server LDAP BER Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Proxy Server Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Server Detection (LDAP)

LDAP based detection of IBM Tivoli Directory Server. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4216

IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service daemon crash via vectors involving a buffer that has a memory address near the maximum...

CVE-2010-4217

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service daemon crash via an unbind request that occurs during a certain search operation...