CVE-2006-2738

The CVE-2006-2738 entry concerns the open source Open-Xchange 0.8.2 and earlier. It states that a static default username and password, with a valid login shell in the ldap-server initfile, enables remote attackers to access any server where the default has not been changed. Affected component: t...

Lotus Domino 7.0.x8.08.5 - LDAP Message Remote Denial of Service

Lotus Domino 7.0.x8.08.5 - LDAP Message Remote Denial of Service source: https://www.securityfocus.com/bid/17669/info Lotus Domino LDAP server is prone to a remote denial-of-service vulnerability when handling malformed requests. Lotus Domino 7.0 is vulnerable; earlier versions may also be...

'ldapsearch' Information Gathering (LDAP Protocol)

This plugins shows what information can be pulled of an LDAP server. SPDX-FileCopyrightText: 2006 Tarik El-Yassem/ITsec Security Services Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Lotus Domino LDAP Server Denial of Service Vulnerability

The remote LDAP server is affected by a denial of service vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SA18818] Isode M-Vault Server LDAP Vulnerability

TITLE: Isode M-Vault Server LDAP Vulnerability SECUNIA ADVISORY ID: SA18818 VERIFY ADVISORY: http://secunia.com/advisories/18818/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Isode M-Vault 11.x http://secunia.com/product/8065/ DESCRIPTION: Evgeny...

CVE-2005-2712

CVE-2005-2712 affects IBM Lotus Domino LDAP server (nldap.exe) before version 7.0.1, and 6.5.5 and 6.5.4 FP2. A long LDAP bind request can trigger a NULL dereference, causing the service to crash (DoS). Vendor-patched versions include Domino 6.5.5 and 7.0.1 / 6.5.4 FP2; a workaround was described...

CVE-2005-2712

The LDAP server nldap.exe in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service crash via a long bind request, which triggers a null dereference...

Lotus Domino LDAP Server Crafted Packet Remote DoS

The LDAP server on the remote host appears to have crashed after being sent a malformed request. The specific request used is known to crash the LDAP server in Lotus Domino 7.0. By leveraging this flaw, an attacker may be able to deny service to legitimate users. %NASLMINLEVEL 70300 C Tenable...

[SA18738] IBM Lotus Domino LDAP Server Denial of Service Vulnerability

TITLE: IBM Lotus Domino LDAP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18738 VERIFY ADVISORY: http://secunia.com/advisories/18738/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: IBM Lotus Domino 7.x http://secunia.com/product/5746/ DESCRIPTION: Evgeny...

CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths. A user can leverage this issue to crash not...

Ubuntu 4.10 / 5.04 : evolution vulnerabilities (USN-166-1)

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...

CVE-2005-2712

The LDAP server nldap.exe in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service crash via a long bind request, which triggers a null dereference...

LDAP allows null bases

It is possible to disclose LDAP information. SPDX-FileCopyrightText: 2005 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10722"...

GLSA-200509-04 : phpLDAPadmin: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-200509-04 phpLDAPadmin: Authentication bypass Alexander Gerasiov discovered a flaw in login.php preventing the application from validating whether anonymous bind has been disabled in the target LDAP server configuration. Impact :...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

CVE-2005-2654

CVE-2005-2654 affects phpldapadmin prior to 0.9.6c, where an HTTP request to login.php with the anonymous_bind parameter can bypass disable_anon_bind and grant anonymous access to the LDAP server. Connected sources corroborate this flaw and link to affected releases and upstream advisories. Gento...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

DSA-790-1 phpldapadmin - programming error

Bulletin has no description...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...