11652 matches found
SUSE SLES11 Security Update : samba (SUSE-SU-2018:0018-1)
"This update for samba fixes the following issues : - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; bsc1063008 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SUSE...
MGASA-2018-0033 Updated openldap packages fix security vulnerability
A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote attacker with access to search the directory could potentially use this flaw to crash slapd by issuing a specially crafted LDAP search query CVE-2017-9287. The openldap package ha...
Updated openldap packages fix security vulnerability
A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote attacker with access to search the directory could potentially use this flaw to crash slapd by issuing a specially crafted LDAP search query CVE-2017-9287. The openldap package ha...
samba -- multiple vulnerabilities
The samba project reports: Missing null pointer checks may crash the external print server process. On a Samba 4 AD DC any authenticated user can change other user's passwords over LDAP, including the passwords of administrative users and service accounts...
PT-2018-2734 · Mit +4 · Mit-Krb5 +4
Name of the Vulnerable Software and Affected Versions: MIT krb5 versions 1.6 or later Description: The issue is related to a null pointer dereference in the Kerberos authentication protocol, which can lead to a denial of service. An authenticated kadmin with permission to add principals to an LDA...
ADRecon - Tool Which Gathers Information About The Active Directory
ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...
CVE-2017-16731
An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 including Ellipse Select. A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by...
Authentication flaw
An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 including Ellipse Select. A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by...
CVE-2017-16731
An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 including Ellipse Select. A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by...
CVE-2017-16731
The CVE-2017-16731 entry concerns ABB Ellipse versions 8.3–8.9 (including Ellipse Select) with an unprotected transport of credentials when authenticating to LDAP/AD via LDAP. The root cause is insecure credential transmission over the network, enabling an attacker on the local network to sniff t...
Man-in-the-Middle (MitM)
net-ldap is vulnerable to man-in-the-middle MitM. The application does not validate SSL certificates, allowing a malicious user to pass a certificate to the application to steal credentials...
Sonatype Nexus Repository Manager 2.x Weak Password Encryption Vulnerability (Dec 2017)
Sonatype Nexus Repository Manager has a weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Ruby Net::LDAP gem SSL Certificate Validation Vulnerability
Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto.Net::LDAP aka net-ldap gem is one of the lightweight directory access modules. A security vulnerability exists in the Ruby Net::LDAP gem prior to version...
Weak Implementation Of Password Cipher
nexus-ldap-common contains a weak implementation of password cipher. It stores the LDAP bind password using the PBE Key Spec with only 23 iterations and a hard-coded password. This allows the cipher to be easily defeated...
Input validation
The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...
CVE-2017-17718
The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...
CVE-2017-17718
The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...
UBUNTU-CVE-2017-17718
The Net::LDAP aka net-ldap gem before 0.16.0 for Ruby has Missing SSL Certificate Validation...