CVE-2014-8733: Exposure of Sensitive Information to an Unauthorized Actor

Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password...

Fedora 21 : freeipa-4.1.1-1.fc21 / slapi-nis-0.54.1-1.fc21 (2014-14427)

freeipa : - Update to upstream 4.1.1 - see http://www.freeipa.org/page/Releases/4.1.1 - fix CVE-2014-7828 slapi-nis : - support FreeIPA overrides in LDAP BIND callback - ignore FreeIPA override searchs outside configured schema compat subtrees Note that Tenable Network Security has extracted the...

IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability

No description provided by source. !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=23&Itemid=23 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '192.168.100.66'; my $port = 389; my $proto = 'tcp'; my $sockType = SOCKSTREAM; my...

PT-2013-4280

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX versions prior to 1.6.1.6 Description The issue allows local users to discover the cleartext LDAP bind password by reading the console when an unspecified level of debug logging is used in LDAP configurations...

CVE-2013-3287: Undefined Security Weakness

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

CVE-2013-5572

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldapbindpassword value in the HTML source code...

CVE-2013-5572

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldapbindpassword value in the HTML source code...

PT-2013-5650

Name of the Vulnerable Software and Affected Versions Zabbix version 2.0.5 Description The issue allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap bind password value in the HTML source code. Recommendations For Zabbi...

CVE-2013-5572: Undefined Security Weakness

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldapbindpassword value in the HTML source code...

Information disclosure

Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493...

CVE-2012-6596: Undefined Security Weakness

Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493...

IBM Lotus Domino 8.5.x < 8.5.3 Multiple Vulnerabilities

According to its banner, the version of Lotus Domino on the remote host is 8.5.x prior to 8.5.3, and is, therefore, affected by the following vulnerabilities : - A heap-based buffer overflow error exists in the file ndiiop.exe related to the DIIOP implementation and GIOP request handling...

CVE-2012-3310: Undefined Security Weakness

IBM Tivoli Federated Identity Manager TFIM before 6.1.1.14, 6.2.0 before 6.2.0.12, and 6.2.1 before 6.2.1.4 allows context-dependent attackers to discover 1 a cleartext LDAP Bind Password, 2 keystore passwords, 3 a cleartext Basic Authentication password from a client, or 4 a cleartext user...

PT-2013-1593

Name of the Vulnerable Software and Affected Versions IBM Tivoli Federated Identity Manager TFIM versions prior to 6.1.1.14 IBM Tivoli Federated Identity Manager TFIM versions 6.2.0 through 6.2.0.11 IBM Tivoli Federated Identity Manager TFIM versions 6.2.1 through 6.2.1.3 Description The issue...

PT-2012-6285

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.x and earlier, 4.0.x through 4.0.8, 4.1.x through 4.1.2 Description The issue allows context-dependent attackers to obtain sensitive information by reading the authd.log file, where cleartext LDAP bind...

Design/Logic Flaw

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

CVE-2008-7288

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

PT-2011-1281

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS versions 5.2 through 5.2.0.5-TIV-ITDS-LA0007 Description The issue allows remote attackers to cause a denial of service, leading to server destabilization. This is achieved through an anonymous DIGEST-MD5 LDAP...

CVE-2008-7288: Undefined Security Weakness

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service server destabilization via an anonymous DIGEST-MD5 LDAP Bind operation...

IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=23&Itemid=23 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '192.168.100.66'; my $port = 389; my $proto = 'tcp'; my $sockType =...