CVE-2004-1236

Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...

CVE-2004-1236

The CVE-2004-1236 entry describes a buffer overflow in the LDAP component of Netscape Directory Server (NDS) 3.6 on HP-UX and other OSes, leading to remote code execution. Connected sources confirm a broader class of LDAP buffer-overflow issues across multiple vendors (e.g., HP, Netscape, Hitachi...

CVE-2004-1236

Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...

Netscape Directory Server buffer overflow

LDAP buffer overflow...

[Security Bulletin] SSRT4867 rev.0 Netscape Directory Server on HP-UX LDAP remote buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01105 REVISION: 0 SSRT4867 Netscape Directory Server on HP-UX LDAP remote buffer overflow NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

IBM Tivoli Directory Server 3.2.24.1 - LDACGI Directory Traversal

IBM Tivoli Directory Server 3.2.24.1 - LDACGI Directory Traversal source: https://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitizati...

Tivoli Directory Server ldacgi.exe Template Parameter Traversal Arbitrary File Access

The remote host is running IBM Tivoli's Directory Server, a lightweight LDAP server with a web frontend. There is a directory traversal issue in the web frontend of this program, specifically in the 'ldacgi.exe' CGI. An attacker may exploit this flaw to read arbitrary files on the remote system...

IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal

source: https://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitization of user-supplied data. This issue allows remote attackers to vi...

Solaris 9 (x86) : 114273-04

SunOS 5.9x86 5.10x86: Sun ONE Directory Server 5.1 patch. Date this patch was last updated by Sun : Mar/15/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2003-1125

Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service service halt...

IBM Directory Server crossite scripting

Crossite scripting in web managment interface...

IBM Directory Server 4.1 Web Admin Gui (ldacgi.exe) XSS Vulnerability

IBM Directory Server 4.1 Web Admin Gui ldacgi.exe XSS Vulnerability ===================================================================== During the audit of 3rd party product, based on IBM Directory Server, i found a cross site scripting vulnerability on IBM's Directory Server 4.1 Web Admin Gui...

IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting

IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a...

IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a malicious link to the server, which when followed will be rendered in the vict...

Sun ONE Directory Server "ns-ldapd" can be terminated by unprivileged user

Overview A denial-of-service vulnerability exists in the Sun ONE Directory Server. This vulnerability may allow a remote attacker to effectively terminate directory services on the affected host. Description Sun describes the Sun ONE Directory Server asa software product that provides a central...

CVE-2002-0786

iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter...

CVE-2002-0787

The CVE-2002-0787 entry describes a cross-site scripting vulnerability in the iCon administrative web server for Critical Path inJoin Directory Server 4.0. The issue arises from reflected XSS via modified administrator URLs using the LOCID or OC parameters, allowing remote attackers to execute sc...

CVE-2002-0786

iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter...

CVE-2002-0787

Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified 1 LOCID or 2 OC parameters...

injoin.txt

Per our policy at http://www.nmrc.org/advise/policy.txt, we are releasing these advisories as these are not high priority and the vendor has a fix that is scheduled to be released soon. In an effort to save bandwidth, both advisories are in this single email. NMRC will see you at DefCon in Las...