CVE-2013-3285

The NetWorker Management Console NMC in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via 1 unspecified NMC audit reports or 2 requests to RAP resources...

CVE-2013-3287

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

CVE-2013-4477

CVE-2013-4477 affects the LDAP backend of OpenStack Identity (Keystone) in the Grizzly and Havana releases. The issue occurs when removing a role on a tenant for a user who does not have that role; Keystone ends up granting that role to the user, effectively allowing local users to gain privilege...

CVE-2013-4477

The LDAP backend in OpenStack Identity Keystone Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges...

CVE-2013-4477

The LDAP backend in OpenStack Identity Keystone Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges...

EMC NetWorker 8.x < 8.0.2.3 Management Console Information Disclosure

The version of EMC NetWorker is 8.x earlier than 8.0.2.3. As such, it is potentially affected by an information disclosure vulnerability. When the NetWorker Management Console is configured to use Active Directory/LDAP for authentication, an authenticated user may be able to see the AD/LDAP...

[Outlook Password Dump] Tool to quickly recover lost email passwords from all versions of Microsoft Outlook

Outlook Password Dump is the free command-line tool to quickly recover lost email passwords from all versions of Microsoft Outlook. Outlook stores passwords for all the configured mail accounts on your system. These passwords are stored in the encrypted format and only respective user can decrypt...

IBM Tivoli Endpoint Manager Server 9.0.777 (patch 2) LDAP and AD Authentication

According to its self-reported version, IBM Tivoli Endpoint Manager Server 9.0.777.0 patch 2 is installed on the remote host. It is, therefore, affected by a vulnerability that could allow an attacker to impersonate any LDAP-authenticated Console user when LDAP and Active Directory authentication...

Oracle Java LDAP Deserialization Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of LDAP...

Fedora 19 : zabbix-2.0.8-3.fc19 (2013-18351)

New upstream version 2.0.8 - Patch for CVE-2013-5743 SQL injection vulnerability, ZBX-7091 - Patch for ZBX-6922 Failing host XML import - SQL speed-up patch for graphs ZBX-6804 - Require php-ldap and ZBX-6992 Service SQL - Create and configure a spooling directory for fping files outside of /tmp...

Fedora 20 : zabbix-2.0.8-3.fc20 (2013-18314)

New upstream version 2.0.8 - Patch for CVE-2013-5743 SQL injection vulnerability, ZBX-7091 - Patch for ZBX-6922 Failing host XML import - SQL speed-up patch for graphs ZBX-6804 - Require php-ldap and ZBX-6992 Service SQL - Create and configure a spooling directory for fping files outside of /tmp...

Fedora 18 : zabbix-2.0.8-3.fc18 (2013-18348)

New upstream version 2.0.8 - Patch for CVE-2013-5743 SQL injection vulnerability, ZBX-7091 - Patch for ZBX-6922 Failing host XML import - SQL speed-up patch for graphs ZBX-6804 - Require php-ldap and ZBX-6992 Service SQL - Create and configure a spooling directory for fping files outside of /tmp...

CVE-2013-5510

The remote-access VPN implementation in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.6.x before 8.61.12, 9.0.x before 9.03.1, and 9.1.x before 9.12.5, when an override-account-disable option is enabled, does not...

Authentication flaw

The remote-access VPN implementation in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.6.x before 8.61.12, 9.0.x before 9.03.1, and 9.1.x before 9.12.5, when an override-account-disable option is enabled, does not...

CVE-2013-5510

The remote-access VPN implementation in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.6.x before 8.61.12, 9.0.x before 9.03.1, and 9.1.x before 9.12.5, when an override-account-disable option is enabled, does not...

Scientific Linux Security Update : sssd on SL5.x i386/x86_64 (20130930)

A race condition was found in the way SSSD copied and removed user home directories. A local attacker who is able to write into the home directory of a different user who is being removed could use this flaw to perform symbolic link attacks, possibly allowing them to modify and delete arbitrary...

Scientific Linux Security Update : sudo on SL5.x i386/x86_64 (20130930)

A flaw was found in the way sudo handled time stamp files. An attacker able to run code as a local user and with the ability to control the system clock could possibly gain additional privileges by running commands that the victim user was allowed to run via sudo, without knowing the victim's...

Cisco Adaptive Security Appliance Software Remote Access VPN Authentication Bypass Vulnerability

A vulnerability in the authentication code of the remote access VPN feature of Cisco ASA Software could allow an unauthenticated, remote attacker to bypass the remote VPN authentication, which could allow remote access to the inside network. The vulnerability is due to improper parsing of the LDA...

sudo security update

CentOS Errata and Security Advisory CESA-2013:1353 An updated sudo package that fixes multiple security issues and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring...

libipa_hbac, sssd security update

CentOS Errata and Security Advisory CESA-2013:1319 Updated sssd packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...