CVE-2010-3535

CVE-2010-3535 affects the Directory Server Enterprise Edition component of Oracle Sun Product Suite (versions 6.0–6.3). The vulnerability is described as unspecified and exploitable via Identity Synchronization for Windows, with potential impact to confidentiality, integrity, and availability. Th...

[security bulletin] HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02522633 Version: 1 HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation NOTICE: The information in...

HP-UX Directory Server / Red Hat Directory Server multiple security vulnerabilities

Information leak, privilege escalation...

HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587

Check for the Version of Directory Server and Red Hat Directory Server for HP-UX OpenVAS Vulnerability Test HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587

Check for the Version of Directory Server and Red Hat Directory Server for HP-UX OpenVAS Vulnerability Test HP-UX Update for Directory Server and Red Hat Directory Server for HP-UX HPSBUX02587 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Sun Directory Server LDAP Denial of Service (CVE-2006-0647)

Sun Directory Server is a distributed directory server based on the Lightweight Directory Access Protocol LDAP. The server listens for LDAP requests on a port specified during installation. The default port assigned to the server during installation is randomly selected. There exists a...

CVE-2010-2241

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

Design/Logic Flaw

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2241

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2241

CVE-2010-2241 affects Red Hat Directory Server up to version 8.1.x (before 8.2). The vulnerable component comprises the setup-ds.pl and setup-ds-admin.pl setup scripts, which create cache files with world-readable permissions. This underprivileged exposure allows a local user to obtain sensitive ...

redhat-ds: setup script insecure .inf file permissions

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

CVE-2010-2927

The slapiprintmessage function in IBM Tivoli Directory Server ITDS before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service daemon crash via multiple incomplete DIGEST-MD5 connection attempts...

Denial of service

The slapiprintmessage function in IBM Tivoli Directory Server ITDS before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service daemon crash via multiple incomplete DIGEST-MD5 connection attempts...

CVE-2010-2927

The slapiprintmessage function in IBM Tivoli Directory Server ITDS before 6.0.0.8-TIV-ITDS-IF0006 allows remote attackers to cause a denial of service daemon crash via multiple incomplete DIGEST-MD5 connection attempts...

CVE-2010-2927

The vulnerability CVE-2010-2927 affects IBM Tivoli Directory Server (ITDS) prior to 6.0.0.8-TIV-ITDS-IF0006. The issue lies in the slapi_printmessage function, which can be triggered by multiple incomplete DIGEST-MD5 connection attempts, leading to a denial of service (daemon crash). The availabl...

IBM Tivoli Directory Server ldapinst.log DB2 Admin Password Disclosure

The remote installation of Tivoli Directory Server created a file called 'ldapinst.log' that contains the login and password of the IBM DB2 database used for this service. An attacker who could get access to this file or a backup of it would be able to log into the DB2 database and modify its...

(RHSA-2010:0452) Low: Red Hat Directory Server 7.1 - End of Life Notice

On June 7, 2010, per the life-cycle support policy, version 7.1 of Red Hat Directory Server will exit Production Phase 2, marking the end of its support by Red Hat. Please reference the support policy here: https://www.redhat.com/security/updates/directory/ For migration planning, please note the...

Mandriva Update for mandriva-doc MDVA-2010:151 (mandriva-doc)

Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:151 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for mandriva-doc MDVA-2010:151 (mandriva-doc)

Check for the Version of mandriva-doc OpenVAS Vulnerability Test Mandriva Update for mandriva-doc MDVA-2010:151 mandriva-doc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability

ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-074 April 13, 2010 -- CVE ID: CVE-2010-0897 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Directory Server -...