CVE-2002-0303

CVE-2002-0303 affects Novell GroupWise 6 when using LDAP authentication and the Post Office has a blank username and password. The vulnerability allows an attacker to log in without a password and gain privileges of other users. Root cause described in the public description is an authentication ...

CVE-2001-1359

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...

CVE-2000-1056

CiscoSecure ACS Server 2.4(2) and earlier versions are affected by an LDAP authentication bypass when the LDAP server allows null passwords. The vulnerability allows remote attackers to bypass authentication and access the server, with partial impact to confidentiality, integrity, and availabilit...

CVE-2000-1056

CiscoSecure ACS Server 2.42 and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords...

CVE-2000-1056

CiscoSecure ACS Server 2.42 and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords...

checkpoint.ldap.txt

Overwiew: With FireWall-1 Version 4.0 Checkpoint introduced support for the Lightweight Directory Access Protocol LDAP for user authentication. It looks like there's a bug in Checkpoint's ldap code which under certain circumstances can lead to unauthorized access to protected systems behind the...