CVE-2010-2940

CVE-2010-2940 affects System Security Services Daemon (SSSD) 1.3.0. When LDAP authentication with anonymous bind is enabled, the auth_send function in providers/ldap/ldap_auth.c allows remote attackers to bypass pam_authenticate by supplying an empty password. The vulnerability enables partial co...

Authentication flaw

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password...

CVE-2010-1596

CVE-2010-1596 affects Support Incident Tracker (SiT!) prior to version 3.51. When LDAP authentication uses anonymous binds, remote attackers can bypass authentication by supplying an empty password. Exploitation details are supported by multiple sources in the connected docs, including OpenVAS an...

CVE-2010-1596

Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password...

Mandriva Update for drakxtools MDVA-2010:082 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:082 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

MDVA-2010:082 : drakxtools

When LDAP authentication is configured using the drakauth application, it could result in several bogus error messages related to '/var/lib/misc/group.db: file not found'. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...

Debian DSA-1900-1 : postgresql-7.4, postgresql-8.1, postgresql-8.3, postgresql-8.4 - several vulnerabilities

Several vulnerabilities have been discovered in PostgreSQL, a SQL database system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3229 Authenticated users can shut down the backend server by re-LOAD-ing libraries in $libdir/plugins, if any librarie...

ldap-brute NSE Script

Attempts to brute-force LDAP authentication. By default it uses the built-in username and password lists. In order to use your own lists use the userdb and passdb script arguments. This script does not make any attempt to prevent account lockout! If the number of passwords in the dictionary excee...

Mandriva Security Advisory MDVSA-2009:251-1 (postgresql8.2)

The remote host is missing an update to postgresql8.2 announced via advisory MDVSA-2009:251-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only O...

openSUSE 10 Security Update : postgresql (postgresql-6502)

Multiple security vulnerabilities have been fixed in PostgrSQL - CVE-2009-3229: allows remote authenticated users to cause a denial of service - CVE-2009-3230: allows remote authenticated users to gain higher privileges - CVE-2009-3231: when using LDAP authentication with anonymous binds, allows...

Mandriva Linux Security Advisory : postgresql8.2 (MDVSA-2009:251-1)

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service backend shutdown by re-LOAD-ing libraries from a certain plugins directory CVE-2009-3229. The core server component in PostgreSQL 8.4...

DSA-1900-1 postgresql-7.4 postgresql-8.1 postgresql-8.3 - various problems

Bulletin has no description...

MDVSA-2009:177 : postgresql

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service backend shutdown by re-LOAD-ing libraries from a certain plugins directory CVE-2009-3229. The core server component in PostgreSQL 8.4...

openSUSE Security Update : postgresql (postgresql-1322)

Multiple security vulnerabilities have been fixed in PostgrSQL - CVE-2009-3229: allows remote authenticated users to cause a denial of service - CVE-2009-3230: allows remote authenticated users to gain higher privileges - CVE-2009-3231: when using LDAP authentication with anonymous binds, allows...

openSUSE Security Update : postgresql (postgresql-1322)

Multiple security vulnerabilities have been fixed in PostgrSQL - CVE-2009-3229: allows remote authenticated users to cause a denial of service - CVE-2009-3230: allows remote authenticated users to gain higher privileges - CVE-2009-3231: when using LDAP authentication with anonymous binds, allows...

Ubuntu USN-834-1 (postgresql-8.3)

The remote host is missing an update to postgresql-8.3 announced via advisory USN-834-1. OpenVAS Vulnerability Test $Id: ubuntu8341.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8341.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-834-1 postgresql-8.3...

Ubuntu: Security Advisory (USN-834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 12509)

Multiple security vulnerabilities have been fixed in PostgreSQL : - allows remote authenticated users to cause a denial of service. CVE-2009-3229 - allows remote authenticated users to gain higher privileges. CVE-2009-3230 - when using LDAP authentication with anonymous binds, allows remote...

Important: Red Hat Security Advisory: Red Hat Application Stack v2.4 security and enhancement update

Red Hat Application Stack v2.4 is now available. This update fixes several security issues and adds various enhancements. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Application Stack v2.4 is an integrated open source application...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : postgresql-8.1, postgresql-8.3 vulnerabilities (USN-834-1)

It was discovered that PostgreSQL could be made to unload and reload an already loaded module by using the LOAD command. A remote authenticated attacker could exploit this to cause a denial of service. This issue did not affect Ubuntu 6.06 LTS. CVE-2009-3229 Due to an incomplete fix for...