CVE-2005-2712

CVE-2005-2712 affects IBM Lotus Domino LDAP server (nldap.exe) before version 7.0.1, and 6.5.5 and 6.5.4 FP2. A long LDAP bind request can trigger a NULL dereference, causing the service to crash (DoS). Vendor-patched versions include Domino 6.5.5 and 7.0.1 / 6.5.4 FP2; a workaround was described...

CVE-2005-2712

The LDAP server nldap.exe in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service crash via a long bind request, which triggers a null dereference...

Lotus Domino LDAP Server Crafted Packet Remote DoS

The LDAP server on the remote host appears to have crashed after being sent a malformed request. The specific request used is known to crash the LDAP server in Lotus Domino 7.0. By leveraging this flaw, an attacker may be able to deny service to legitimate users. %NASLMINLEVEL 70300 C Tenable...

[SA18738] IBM Lotus Domino LDAP Server Denial of Service Vulnerability

TITLE: IBM Lotus Domino LDAP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18738 VERIFY ADVISORY: http://secunia.com/advisories/18738/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: IBM Lotus Domino 7.x http://secunia.com/product/5746/ DESCRIPTION: Evgeny...

CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths. A user can leverage this issue to crash not...

CVE-2006-0419: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service unspecified via a large number of connections...

Ubuntu 4.10 / 5.04 : evolution vulnerabilities (USN-166-1)

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...

CVE-2005-2712

The LDAP server nldap.exe in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service crash via a long bind request, which triggers a null dereference...

LDAP allows null bases

It is possible to disclose LDAP information. SPDX-FileCopyrightText: 2005 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10722"...

GLSA-200509-04 : phpLDAPadmin: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-200509-04 phpLDAPadmin: Authentication bypass Alexander Gerasiov discovered a flaw in login.php preventing the application from validating whether anonymous bind has been disabled in the target LDAP server configuration. Impact :...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

CVE-2005-2654

CVE-2005-2654 affects phpldapadmin prior to 0.9.6c, where an HTTP request to login.php with the anonymous_bind parameter can bypass disable_anon_bind and grant anonymous access to the LDAP server. Connected sources corroborate this flaw and link to affected releases and upstream advisories. Gento...

CVE-2005-2654

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set...

DSA-790-1 phpldapadmin - programming error

Bulletin has no description...

CVE-2005-2696

IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book NAB, which allows remote attackers to obtain sensitive information via the 1 password digest field in the Administration tab of a Lotus Notes client, 2 "PasswordDigest" and "HTTPPassword" fields in the...

pam_ldap -- authentication bypass vulnerability

Luke Howard reports: If a pamldap client authenticates against an LDAP server that returns a passwordPolicyResponse control, but omits the optional "error" field of the PasswordPolicyResponseValue, then the LDAP authentication result will be ignored and the authentication step will always succeed...

Multiple Evultion e-mail agent and groupware client format string vulnerabilities

Format string bugs on vCard format parsing, LDAP server reply parsing, remote server tasks displaying...

CVE-2005-2377

nssldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service crond and...

CVE-2005-1748

The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service...