Lucene search
+L

2280 matches found

OSV
OSV
added 2022/04/09 9:20 p.m.9 views

MGASA-2022-0134 Updated 389-ds-base packages fix security vulnerability

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The...

7.5CVSS6.7AI score0.05914EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2022/04/05 12:0 a.m.39 views

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:1100-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1100-1 advisory. - CVE-2022-0918: Fixed a potential denial of service via crafted packet bsc1197275. - CVE-2022-0996: Fixed a mishandling of passwor...

7.5CVSS6.8AI score0.05914EPSS
SaveExploits3References9
OpenVAS
OpenVAS
added 2022/04/02 12:0 a.m.26 views

Fedora: Security Advisory for 389-ds-base (FEDORA-2022-40544b5314)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS7AI score0.01531EPSS
SaveExploits2References2
OSV
OSV
added 2022/03/26 11:3 a.m.5 views

OESA-2022-1602 three-eight-nine-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an...

5.3CVSS7.1AI score0.01538EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/23 8:15 p.m.24 views

CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

6.5CVSS0.01531EPSS
SaveExploits2References6
OSV
OSV
added 2022/03/23 8:15 p.m.1 views

DEBIAN-CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

6.5CVSS6.8AI score0.01531EPSS
SaveExploits2References1
OSV
OSV
added 2022/03/23 8:15 p.m.7 views

CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

6.5CVSS7.2AI score
SaveExploits0References6
Prion
Prion
added 2022/03/23 8:15 p.m.22 views

Authentication flaw

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

4CVSS6.6AI score0.01531EPSS
SaveExploits2References5Affected Software3
OSV
OSV
added 2022/03/23 8:15 p.m.3 views

UBUNTU-CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

6.5CVSS6.7AI score0.01531EPSS
SaveExploits2References3
CVE
CVE
added 2022/03/23 7:46 p.m.167 views

CVE-2022-0996

CVE-2022-0996 affects the 389-ds-base LDAP server. The issue allows an account with expired passwords to access the database, enabling improper authentication. Connected advisories confirm this vulnerability across multiple distributions and versions, with fixes provided in downstream security up...

6.5CVSS6.5AI score0.01531EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2022/03/23 7:46 p.m.42 views

CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

6.9AI score0.01531EPSS
SaveExploits2References5
Debian CVE
Debian CVE
added 2022/03/23 7:46 p.m.56 views

CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

6.5CVSS6.6AI score0.01531EPSS
SaveExploits2
CNVD
CNVD
added 2022/03/23 12:0 a.m.56 views

Red Hat 389 Directory Server Code Issue Vulnerability

Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat, Inc. The server fully supports the LDAPv3 specification and features scalable, multi-master replication, etc. A security vulnerability exists in Red Hat 389 Directory...

6.5CVSS1.3AI score0.01531EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2022/03/23 12:0 a.m.40 views

CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

6.5CVSS6.7AI score0.01531EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2022/03/21 4:3 a.m.34 views

CVE-2022-0996

A vulnerability was found in the 389 Directory Server. This issue allows expired passwords to access the database, causing improper authentication...

6.5CVSS3.7AI score0.01531EPSS
SaveExploits2References3
GithubExploit
GithubExploit
added 2022/03/21 4:1 a.m.72 views

Exploit for Improper Authentication in Redhat 389_Directory_Server

389-ds...

6.5CVSS7.4AI score0.01531EPSS
SaveExploits2
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.5 views

Red Hat 389 Directory Server 授权问题漏洞

Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat, Inc. The server fully supports the LDAPv3 specification and features scalable, multi-master replication, etc. A security vulnerability exists in Red Hat 389 Directory...

6.5CVSS7.3AI score0.01531EPSS
SaveExploits2References26
Positive Technologies
Positive Technologies
added 2022/03/21 12:0 a.m.11 views

PT-2022-6593 · Red Hat +5 · 389 Directory Server +6

Name of the Vulnerable Software and Affected Versions: 389 Directory Server affected versions not specified Description: The issue is related to improper authentication in the 389 Directory Server, allowing expired passwords to access the database. This can be exploited by a remote attacker to ga...

7.5CVSS6.3AI score0.08426EPSS
SaveExploits4References112
RedHat Linux
RedHat Linux
added 2022/03/16 3:22 p.m.39 views

Moderate: Red Hat Security Advisory: redhat-ds:11.3 security and bug fix update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.3 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.5CVSS6.7AI score0.02014EPSS
SaveExploits0References7
NVD
NVD
added 2022/03/16 3:15 p.m.22 views

CVE-2022-0918

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The...

7.5CVSS0.05914EPSS
SaveExploits1References5
Rows per page
Query Builder