GNOME Evolution Evolution-Data-Server Buffer Overflow Vulnerability

GNOME Evolution is a set of mail client programs from the GNOME project for the Gnome desktop environment on Linux. The program provides Email, calendar, meeting scheduling, contact management, etc. Evolution-Data-Server is one of the data server components. A buffer overflow vulnerability exists...

CVE-2018-12422

addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the...

Authentication flaw

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

CVE-2017-9277

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

CVE-2017-9277: Undefined Security Weakness

The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA Enhanced Background Authentication kept open connections without EBA...

PT-2018-8499

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions prior to 9.0 SP4 Description The LDAP backend in Novell eDirectory has an issue when switched to EBA Enhanced Background Authentication, where it keeps open connections without EBA. Recommendations For versions prior...

krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001)

A buffer overflow was found in the KADM5 administration server kadmind when it was used with an LDAP back end for the KDC database. A remote, authenticated attacker could potentially use this flaw to execute arbitrary code on the system running kadmind...

openSUSE Security Update : krb5 / krb5-doc / krb5-mini (openSUSE-SU-2014:1043-1)

Thit MIT krb5 update fixes the following security issue : - buffer overrun in kadmind with LDAP backend bnc891082, CVE-2014-4345 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Ubuntu 14.04 LTS : Kerberos vulnerabilities (USN-2310-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2310-1 advisory. It was discovered that Kerberos incorrectly handled certain crafted Draft 9 requests. A remote attacker could use this issue to cause the daemon to crash...

USN-2310-1: Kerberos vulnerabilities

It was discovered that Kerberos incorrectly handled certain crafted Draft 9 requests. A remote attacker could use this issue to cause the daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. CVE-2012-1016 It was discovered that Kerberos incorrectly handled...

CVE-2013-4496: Password lockout not enforced for SAMR password changes

Description Samba versions 3.4.0 and above allow the administrator to implement locking out Samba accounts after a number of bad password attempts. However, all released versions of Samba did not implement this check for password changes, such as are available over multiple SAMR and RAP interface...

[USN-2034-1] OpenStack Keystone vulnerability

========================================================================== Ubuntu Security Notice USN-2034-1 November 25, 2013 keystone vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

DEBIAN-CVE-2013-4477

The LDAP backend in OpenStack Identity Keystone Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges...

CVE-2013-4477

The LDAP backend in OpenStack Identity Keystone Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges...

CVE-2013-4477: Undefined Security Weakness

The LDAP backend in OpenStack Identity Keystone Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges...

openstack-keystone: Authentication bypass when using LDAP backend

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password...

Ubuntu: Security Advisory (USN-1875-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for bind-dyndb-ldap FEDORA-2012-15965

Check for the Version of bind-dyndb-ldap OpenVAS Vulnerability Test Fedora Update for bind-dyndb-ldap FEDORA-2012-15965 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Ubuntu Update for krb5 USN-1233-1

Ubuntu Update for Linux kernel vulnerabilities USN-1233-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12331.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for krb5 USN-1233-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The lookuplockoutpolicy function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 aka Berkeley DB or LDAP back end is used, allows remote...