710 matches found
CVE-2007-2462: Undefined Security Weakness
Unspecified vulnerability in Cisco Adaptive Security Appliance ASA and PIX 7.2 before 7.228, when using Layer 2 Tunneling Protocol L2TP or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors...
PT-2007-3788 · Cisco · Cisco Asa +1
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and PIX versions 7.1 before 7.1249 Cisco Adaptive Security Appliance ASA and PIX versions 7.2 before 7.2219 Description: The issue is related to a race condition when using clientless SSL VPNs, allowing...
GLSA-200612-19 : pam_ldap: Authentication bypass vulnerability
The remote host is affected by the vulnerability described in GLSA-200612-19 pamldap: Authentication bypass vulnerability Steve Rigler discovered that pamldap does not correctly handle 'PasswordPolicyResponse' control responses from an LDAP directory. This causes the pamauthenticate function to...
Citrix Access Gateway authentication bypass
Unauthenticated access is possible if Advanced Access Control is used with LDAP authentication...
CVE-2006-4846
Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control AAC 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors...
CVE-2006-4846
Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control AAC 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors...
CVE-2006-4846: Undefined Security Weakness
Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control AAC 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors...
CentOS 3 / 4 : squid (CESA-2005:415)
An updated squid package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A race condition bug was found in the way Squid handles the now obsolete Set-Cook...
DSA-952-1 libapache-auth-ldap - format string vulnerability
Bulletin has no description...
CVE-2002-2043
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password...
FreeBSD : squid -- no sanity check of usernames in squid_ldap_auth (7a921e9e-68b1-11d9-9e1e-c296ac722cb3)
The LDAP authentication helper did not strip leading or trailing spaces from the login name. According to the squid patches page : LDAP is very forgiving about spaces in search filters and this could be abused to log in using several variants of the login name, possibly bypassing explicit access...
Fedora Core 3 : squid-2.5.STABLE9-1.FC3.6 (2005-373)
Mon May 16 2005 Jay Fenlason 7:2.5.STABLE9-1.FC3.6 - More upstream patches, including ones for bz157456 CVE-2005-1519 DNS lookups unreliable on untrusted networks bz156162 CVE-1999-0710 cachemgr.cgi access control bypass - The following bugs had already been fixed, but the announcements were lost...
CVE-2004-0939
changepassword.cgi in Neoteris Instant Virtual Extranet IVE 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack...
Squid LDAP authentication routines fail to check for invalid input
Overview The Squid LDAP authentication routine squidldapauth fails to check for input characters, such as whitespace, that could be misused to possibly bypass access restrictions. Description Squid functions as a web proxy and cache application for a number of protocols, and includes support for...
squid proxy server access control lists protection bypass
If LDAP authentication is used space can be added to username to bypass ACL restrictuions...
squid -- no sanity check of usernames in squid_ldap_auth
The LDAP authentication helper did not strip leading or trailing spaces from the login name. According to the squid patches page: LDAP is very forgiving about spaces in search filters and this could be abused to log in using several variants of the login name, possibly bypassing explicit access...
CVE-2004-0939
changepassword.cgi in Neoteris Instant Virtual Extranet IVE 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack...
CVE-2004-0939: Undefined Security Weakness
changepassword.cgi in Neoteris Instant Virtual Extranet IVE 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack...
Mandrake Linux Security Advisory : pam_ldap (MDKSA-2003:088)
A bug was fixed in pamldap 162 with the pamfilter mechanism which is commonly used for host-based access restriction in environments using LDAP for authentication. Mandrake Linux 9.1 provided pamldap 161 which had this problem and as a result, systems relying on pamfilter for host-based access...