Microsoft Active Directory LDAP Server - 'Username' Enumeration

source: https://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid usernames. This may aid them in...

openSUSE 10 Security Update : openldap2 (openldap2-4999)

Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command CVE-2007-6698,CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openldap2-4999. The text description ...

SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 4989)

Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command. CVE-2007-6698 / CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : dhcp-server (ZYPP Patch Number 2437)

A bug was fixed were a LDAP server with malicious data providing information to the DHCP server could crash and potentially execute code as the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Buffer overflow

Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind...

CVE-2007-4566

Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind...

CVE-2007-4566

CVE-2007-4566 affects the SIDVault LDAP Server (Alpha Centauri Software) prior to 2.0f. Multiple remote buffer-overflow defects exist in the login/LDAP handling that allow an attacker to execute arbitrary code by sending crafted LDAP packets (e.g., a long dc entry in a bind). Documents from SUSE,...

CVE-2007-4566

Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind...

exploit.py.txt

!/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc += "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" sc +=...

SIDVault LDAP Server Remote Buffer Overflow

SIDVault LDAP Server Remote Buffer Overflow =========================================== Product Description: SIDVault LDAP Server for Win32 and GNU/Linux SIDVault is a Simple Integration Database, allowing easy management and installations with high performance LDAP v3 server. It supports any...

SIDVault multiple security vulnerabilities

Multiple buffer overflows in LDAP server authentication...

SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc +=...

SIDVault LDAP Server - Remote Buffer Overflow

!/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc += "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" sc +=...

SIDVault LDAP Server - Remote Buffer Overflow

SIDVault LDAP Server - Remote Buffer Overflow !/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc +=...

SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits =========================================================== SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit =========================================================== !/usr/bin/python """ Alpha Centauri Software SIDVault LDAP...

CVE-2007-4364

Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface JNDI, related to 1 a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain "unexpected / strange response...

Sun Java System Directory Server Multiple Vulnerabilities

The remote host is running the Sun Java System Directory Server, an LDAP server from Sun Microsystems. The remote version of this service is affected by multiple vulnerabilities. Versions 6.0 and prior to 5.2 Patch 5 are affected by : - list attributes information disclosure - Unauthorized Access...

LDAP-Server

Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days ToDo: Add execute shell ToDo: Test vulnerable targets...

CVE-2007-2697

The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the...

CVE-2007-2697

The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the...