Symantec Encryption Server Detection (LDAP)

LDAP based detection of Symantec Encryption Server. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symantec Encryption Management Server 3.3.2 < 3.3.2 MP12 Multiple Vulnerabilities (SYM16-002)

The version of Symantec Encryption Management Server running on the remote host is 3.3.2 prior to version 3.3.2 MP12. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw in the LDAP service allows a remote attacker, via a crafted LDAP request, to gather sensitive...

Symantec Encryption Management Server Server Multiple Security Issues

The management console for Symantec Encryption Management Server SEMS is susceptible to potential OS command execution, local access elevation of privilege, a heap-based memory corruption resulting in a service crash and potential information disclosure of management console logon/account...

Self Hosted Git Service: Gogs

Gogs is a self-hosted Git service written in Go which is very easy to get running and has low system usage as well. It aspires to be the easiest, fastest, and most painless way to set up a self-hosted Git service. With Go, this can be done with an independent binary distribution across ALL...

Symantec Encryption Management Server (SEMS) Remote Denial of Service Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12 in the LDAP service. A remote attacker could cause a denial of service heap memory...

Symantec Encryption Management Server (SEMS) Remote Information Disclosure Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12 in the LDAP service. A remote user can exploit this vulnerability to obtain...

CVE-2015-8149

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

CVE-2015-8148

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request...

Design/Logic Flaw

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request...

Memory corruption

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

CVE-2015-8148

CVE-2015-8148 affects Symantec Encryption Management Server (SEMS) LDAP service. SEMS 3.3.2 before MP12 is vulnerable to an information-disclosure via crafted LDAP requests that allows an unauthenticated remote attacker to obtain sensitive information about administrator accounts. This is part of...

CVE-2015-8149

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

CVE-2015-8148

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request...

[SECURITY] Fedora 22 Update: mingw-curl-7.47.0-1.fc22

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

389 security update

CentOS Errata and Security Advisory CESA-2016:0204 Updated 389-ds-base packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System...

Ubuntu 14.04 LTS : Samba regression (USN-2855-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2855-2 advisory. USN-2855-1 fixed vulnerabilities in Samba. The upstream fix for CVE-2015-5252 introduced a regression in certain specific environments. This update fixes the...

RedHat Update for 389-ds-base RHSA-2016:0204-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dual Password Field wrongly shows in First Authentication Prompt when connecting to NetScaler Gateway using Receiver

Consider the following scenario, you are using LDAP + SMS passcode RADIUS authentication. The behavior is that user will first authenticate to LDAP, and then an SMS passcode is sent to their mobile device, which is used for authentication. Unless the user is authenticated to LDAP first, they will...

IBM WebSphere Portal LDAP Injection Vulnerability

IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. A security vulnerability exists in IB...

CentOS Update for 389-ds-base CESA-2016:0204 centos7

Check the version of 389-ds-base SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882397";...