Aruba Mobility Controller unauthorized access

Unauthorized access without password if LDAP authentication module enabled...

CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

CVE-2007-6363

IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...

CVE-2007-6363

IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...

CVE-2007-6363: Improper Neutralization of Input During Web Page Generation

IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...

SuSE 10 Security Update : xscreensaver (ZYPP Patch Number 3241)

xscreensaver could crash under certain circumstances causing the screen to unlock. That could happen for example when LDAP is used for authentication and the network connection gets interrupted for a long time. CVE-2007-1859 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

openSUSE 10 Security Update : samba (samba-1830)

Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication to netbios-name$@realm from host/name@realm; 184450. -...

Mandrake Linux Security Advisory : xscreensaver (MDKSA-2007:097)

A problem with the way xscreensaver verifies user passwords was discovered by Alex Yamauchi. When a system is using remote authentication i.e. LDAP for logins, a local attacker able to cause a network outage on the system could cause xscreensaver to crash, which would unlock the screen. Updated...

CVE-2007-2462

CVE-2007-2462 affects Cisco ASA and PIX firewalls (ASA/PIX) running 7.2 prior to 7.2(2)8. The vulnerability allows remote attackers to bypass LDAP authentication and gain privileges when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, via unspecified vectors. Connected source...

CVE-2007-2462: Undefined Security Weakness

Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...

PT-2007-3788 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.1 before 7.1249 Cisco Adaptive Security Appliance ASA and PIX versions 7.2 before 7.2219 Description: The issue is related to a race condition when using clientless SSL VPNs, allowing...

GLSA-200612-19 : pam_ldap: Authentication bypass vulnerability

The remote host is affected by the vulnerability described in GLSA-200612-19 pamldap: Authentication bypass vulnerability Steve Rigler discovered that pamldap does not correctly handle 'PasswordPolicyResponse' control responses from an LDAP directory. This causes the pamauthenticate function to...

Citrix Access Gateway authentication bypass

Unauthenticated access is possible if Advanced Access Control is used with LDAP authentication...

CVE-2006-4846

Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control AAC 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors...

CVE-2006-4846

Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control AAC 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors...

CVE-2006-4846: Undefined Security Weakness

Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control AAC 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors...

CentOS 3 / 4 : squid (CESA-2005:415)

An updated squid package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A race condition bug was found in the way Squid handles the now obsolete Set-Cook...

DSA-952-1 libapache-auth-ldap - format string vulnerability

Bulletin has no description...

CVE-2002-2043

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password...

FreeBSD : squid -- no sanity check of usernames in squid_ldap_auth (7a921e9e-68b1-11d9-9e1e-c296ac722cb3)

The LDAP authentication helper did not strip leading or trailing spaces from the login name. According to the squid patches page : LDAP is very forgiving about spaces in search filters and this could be abused to log in using several variants of the login name, possibly bypassing explicit access...