11688 matches found
HylaFAX+ 5.2.4 < 5.5.4 Remote Buffer Overflow
According to its version number, the HylaFAX+ install hosted on the remote web server is 5.2.4 or later and prior to 5.5.4. It is, therefore, affected by a heap-based remote buffer overflow vulnerability. The flaw exists when 'hfaxd' is compiled with support for LDAP. The user input for LDAP...
Wireshark 0.99.8 - LDAP Dissector Unspecified DoS
No description provided by source. source: http://www.securityfocus.com/bid/28485/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to cause crashes and deny service to legitimate users of the application. Attackers may be able to...
smartermail 7.3 & 7.4 - Multiple Vulnerabilities
No description provided by source. Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor: SmarterTools Application: SmarterMail 7.x Bugs: Stored XSS, Reflected XSS, Directory Traversal, File Upload Parameters, OS Execution, XML Injection, LDAP...
IBM Tivoli Directory Server 6.0 Unspecified LDAP Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16593/info IBM Tivoli Directory Server is prone to an unspecified memory corruption. This issue may be triggered by malformed LDAP data. The exact impact of this vulnerability is not known at this time. Although the issue...
Lotus Domino 7.0.x/8.0/8.5 LDAP Message Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17669/info Lotus Domino LDAP server is prone to a remote denial-of-service vulnerability when handling malformed requests. Lotus Domino 7.0 is vulnerable; earlier versions may also be affected. UPDATE January 14, 2010: Th...
Critical Path InJoin Directory Server 4.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4718/info Critical Path provides an LDAP Lightweight Directory Access Protocol Directory Server called InJoin. InJoin Directory Server is provided for Microsoft Windows operating systems and Unix variants. iCon is the...
IBM iSeries AS400 LDAP Server Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12991/info A remote information disclosure issue affects IBM iSeries AS400 LDAP Server. This issue is due to a failure of the application to properly secure sensitive information. An authenticated attacker may leverage th...
Apple Mac OS X 10.4.x OpenLDAP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18728/info Mac OS X Open Directory Server is prone to a denial-of-service vulnerability because it fails to handle exceptional conditions. An attacker can exploit this issue to cause a crash in the LDAP server, effectivel...
Zimbra - Privilegie Escalation via LFI (0day)
No description provided by source. Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI Date: 06 Dec 2013 Exploit Author: rubina119 Contact Email : rubina119atgmail.com Vendor Homepage: http://www.zimbra.com/ Version: 2009, 2010, 2011, 2012 and early 2013 versions are afected, Teste...
Network Associates PGP KeyServer 7 LDAP Buffer Overflow
No description provided by source. $Id: pgpkeyserver7.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Isode M-Vault Server 11.3 LDAP Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16635/info Isode M-Vault Server is prone to a memory corruption. This issue may be triggered by malformed LDAP data. The exact impact of this vulnerability is not known at this time. Although the issue is known to crash t...
Microsoft Active Directory LDAP Server Username Enumeration Weakness
No description provided by source. source: http://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid...
SmarterMail 7.x (7.2.3925) LDAP Injection Vulnerability
No description provided by source...
Zimbra Collaboration Server - LFI
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include...
IMail LDAP Service Buffer Overflow
No description provided by source. $Id: imailthc.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability
No description provided by source. !/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=23&Itemid=23 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '192.168.100.66'; my $port = 389; my $proto = 'tcp'; my $sockType = SOCKSTREAM; my...
Kerio MailServer 5.x/6.x Remote LDAP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21091/info Kerio MailServer is prone to a denial-of-service vulnerability due to a flaw when handling malformed network traffic. Successful exploits will result in denial-of-service conditions. !/usr/bin/env python kms1.p...
LDAP Injection PoC
No description provided by source. + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o\ + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y...
DeepOfix SMTP Server 3.3 - Authentication Bypass
No description provided by source. ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server ====================================================================================== Platfor...
Apache module mod_rewrite LDAP protocol Buffer Overflow
No description provided by source. $Id: apachemodrewriteldap.rb 8498 2010-02-15 00:48:03Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...