PT-2014-7313

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.24 Joomla! versions 3.x through 3.2.3 Joomla! versions 3.3.x through 3.3.3 Description The issue allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP...

CVE-2014-6632: Improper Authentication

Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP authentication...

[20140902] - Core - Unauthorised Logins

Inadequate checking allowed unauthorised logins via LDAP authentication...

openSUSE Security Update : tomcat6 (openSUSE-SU-2011:0988-1)

The following security issues were fixed in tomcat : - Fixed a tomcat user password information leak CVE-2011-2204 - Fixed atomcat information leak and DoS CVE-2011-2526 Also one bug was fixed : - fix bnc702289 - suse manager pam ldap authentication fails - source CATALINAHOME/bin/setenv.sh if...

Fedora 20 : zabbix-2.0.11-3.fc20 (2014-5540)

The logrotate configuration had no su statement in 2.0.11-2. Furthermore, the log file should have been created as zabbixsrv:zabbix for the proxy and server, what they are now. http://www.zabbix.com/rn2.0.11.php Also solves 3 security issues : - ZBX-7703 fixed being able to switch users without...

CVE-2013-5680

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

CVE-2013-5680

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

Heap overflow

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

CVE-2013-5680

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

CVE-2013-5680

HylaFAX+ 5.2.4–5.5.3 contains a heap-based buffer overflow in hfaxd when LDAP authentication is enabled. The LDAP path allocates a 255-byte buffer and uses strcat on inbound data, allowing an unauthenticated remote attacker to cause a denial of service (child hang) and potentially execute arbitra...

CVE-2013-5680

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

PT-2014-2946

Name of the Vulnerable Software and Affected Versions HylaFAX+ versions 5.2.4 through 5.5.3 Description A heap-based buffer overflow issue exists in the hfaxd component of HylaFAX+ when using LDAP authentication. This could potentially allow remote attackers to cause a denial of service or execut...

CVE-2013-5680: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

CVE-2012-1100

Red Hat JBoss Operations Network JON 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request...

Design/Logic Flaw

Red Hat JBoss Operations Network JON 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request...

CVE-2012-1100

Red Hat JBoss Operations Network JON 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request...

CVE-2012-1100: Improper Authentication

Red Hat JBoss Operations Network JON 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request...

PT-2014-2218

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Operations Network JON versions 2.4.2 and earlier, 3.0.x before 3.0.1 Description The issue allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request when LDAP authentication is enabled...

HylaFAXplus LDAP Authentication User Name Buffer Overflow (CVE-2013-5680)

A buffer overflow vulnerability has been reported in HylaFAX+...

HylaFAX+ 5.2.4 > 5.5.3 - Buffer Overflow

Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at howardsilvan.com Project Homepage:...