2346 matches found
CVE-2001-1307
Vulnerability CVE-2001-1307 affects iPlanet Directory Server 4.1.4 and earlier, with buffer overflows in LDAP handling that allow remote denial of service and potentially arbitrary code execution, demonstrated by the PROTOS LDAPv3 test suite. A fix is available in iPlanet Directory Server 4.1.5 (...
CVE-2001-1306
The CVE-2001-1306 issue affects iPlanet Directory Server 4.1.4 and earlier (LDAP). The vulnerability allows a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via invalid BER length fields, as demonstrated by the PROTOS LDAPv3 test suite. Remediation (if...
CVE-2001-0975
The CVE-2001-0975 entry describes buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 that allow remote code execution, demonstrated by the PROTOS LDAPv3 test suite. Supported details show Oracle released Solaris-based patches for these versions (July 2001...
CVE-2001-0974
The CVE-2001-0974 entry concerns Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1, where format string vulnerabilities in the LDAP handling code allow remote attackers to execute arbitrary code as demonstrated by the PROTOS LDAPv3 test suite. The CERT/CC advisory CA-2001-18 documents the...
CVE-2001-0164
The CVE-2001-0164 issue affects Netscape Directory Server versions 4.12 and earlier, with a buffer overflow triggered by a specially crafted request in the recipient field. The Security Advisory (SECURITYVULNS/DOC:1363) confirms the exposure in Directory Server 4.11/4.12 and notes that artifacts ...
CVE-2001-0164
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field...
iPlanet Directory Server contains multiple vulnerabilities in LDAP handling code
Overview The iPlanet Directory Server contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product,...
CVE-2001-1307
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-1314
Buffer overflows in Critical Path 1 InJoin Directory Server or 2 LiveContent Directory allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-1321
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-1306
iPlanet Directory Server 4.1.4 and earlier LDAP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-1308
Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-0164
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field...
CVE-2000-1075
The provided data confirms CVE-2000-1075 affects iPlanet products: Certificate Management System 4.2 and Directory Server 4.12. The vulnerability is a directory traversal in the Agent, End Entity, or Administrator services that allows remote attackers to read arbitrary files on the server by send...
Дырка в Netscape Directory Server (buffer overflow)
Переполнение буфера при разборе LDAP-запроса...
@stake Advisory Notification: Netscape Directory Server buffer overflow (A030701-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Notification Advisory Name: Netscape Directory Server buffer overflow Release Date: 03/07/2001 Application: Netscape Directory Server 4.1 bundled with Netscape Messaging Server Netscape Directory Server...
CVE-2000-1076
Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 store the administrative password in plaintext, enabling local and possibly remote attackers to gain administrative privileges. Affected components are the Certificate Management System and Directory Server; the root c...
Netscape Directory Server 4.12 - Directory Server Directory Traversal
Netscape Directory Server 4.12 - Directory Server Directory Traversal source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in Netscape Directory Server. This is made possible through the use ...
Netscape Directory Server 4.12 - Directory Server Directory Traversal
source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in Netscape Directory Server. This is made possible through the use of "../" in a HTTP request. The following services are affected by thi...