RHEL 6 : nss, nss-util, and nspr (RHSA-2012:0973)

Updated nss, nss-util, and nspr packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Network Security Services NSS is a set of...

389: denial of service when using certificate groups

see https://bugzilla.redhat.com/showbug.cgi?id=781519...

CVE-2012-0651

The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message...

CVE-2012-0651

The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message...

IBM Tivoli Directory Server Web Admin tool 6.1.0.x < 6.1.0.48 / 6.2.0.x < 6.2.0.22 / 6.3.0.x < 6.3.0.11 Cross-Site Scripting Vulnerability

Binary data 6478.prm...

CVE-2012-0740

Cross-site scripting XSS vulnerability in the Web Admin Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0743

IBM Tivoli Directory Server TDS 6.3 and earlier allows remote attackers to cause a denial of service daemon crash via a malformed LDAP paged search request...

CVE-2012-0726

The default configuration of TLS in IBM Tivoli Directory Server TDS 6.3 and earlier supports the 1 NULL-MD5 and 2 NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol...

Cross site request forgery (csrf)

IBM Tivoli Directory Server TDS 6.3 and earlier allows remote attackers to cause a denial of service daemon crash via a malformed LDAP paged search request...

Default configuration

The default configuration of TLS in IBM Tivoli Directory Server TDS 6.3 and earlier supports the 1 NULL-MD5 and 2 NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Admin Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0726

CVE-2012-0726 affects IBM Tivoli Directory Server (TDS) 6.3 and earlier. The default TLS configuration enables NULL-MD5 and NULL-SHA ciphers, which can lead to unencrypted communications during the TLS handshake. IBM’s bulletin provides vendor fixes: 6.1.0.47-ISS-ITDS-IF0047 (for 6.1), 6.2.0.22-I...

CVE-2012-0726

The default configuration of TLS in IBM Tivoli Directory Server TDS 6.3 and earlier supports the 1 NULL-MD5 and 2 NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol...

CVE-2012-0743

CVE-2012-0743 affects IBM Tivoli Directory Server (ITDS/TDS) versions 6.3 and earlier. A crafted LDAP paged search request can crash the daemon, causing denial of service. IBM’s advisory notes the vulnerability is a crash/vector that does not indicate arbitrary code execution. Remediation provide...

CVE-2012-0743

IBM Tivoli Directory Server TDS 6.3 and earlier allows remote attackers to cause a denial of service daemon crash via a malformed LDAP paged search request...

CVE-2012-0740

IBM Tivoli Directory Server Web Admin Tool is vulnerable to cross-site scripting (CVE-2012-0740). Affected versions are 6.1, 6.2, and 6.3, with the vulnerability present in Web Admin Tool prior to 6.2.0.22 for 6.2 and prior to 6.3.0.11 for 6.3. The root cause is improper validation of user-suppli...

CVE-2012-0740

Cross-site scripting XSS vulnerability in the Web Admin Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.22 and 6.3 before 6.3.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

IBM Security Directory Server Installed (credentialed check)

IBM Security Directory Server, formerly known as IBM Tivoli Directory Server, an identity management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58813; scriptversion"1.8";...

IBM Tivoli Directory Server Web Administration Tool Unspecified XSS

According to its version, the IBM Tivoli Directory Server Web Administration Tool installed on the remote host is potentially affected by an unspecified cross-site scripting vulnerability. A remote attacker, exploiting this flaw, could potentially execute arbitrary script code in the user's brows...

IBM Tivoli Directory Server < 6.1.0.47 / 6.2.0.22 / 6.3.0.11 Multiple Vulnerabilities (credentialed check)

According to its version, the installation of IBM Tivoli Directory Server on the remote host is prior to 6.1.0.47 / 6.2.0.22 / 6.3.0.11. It is, therefore, affected by one or more of the following vulnerabilities : - A custom LDAP client can be created which causes IBM Tivoli Directory Server to...