11745 matches found
Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130415)
It was found that the 389 Directory Server did not properly restrict access to entries when the 'nsslapd-allow-anonymous-access' configuration setting was set to 'rootdse'. An anonymous user could connect to the LDAP database and, if the search scope is set to BASE, obtain access to information...
Microsoft Windows Active Directory Denial of Service Vulnerability (2830914)
This host is missing an important security update according to Microsoft Bulletin MS13-032. OpenVAS Vulnerability Test $Id: secpodms13-032.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows Active Directory Denial of Service Vulnerability 2830914 Authors: Antu Sanadi Copyright: Copyright ...
Microsoft Windows Active Directory Denial of Service Vulnerability (2830914)
This host is missing an important security update according to Microsoft Bulletin MS13-032. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS13-032: Vulnerability in Active Directory Could Lead to Denial of Service (2830914)
The version of Active Directory installed on the remote host is is affected by a denial of service vulnerability. A remote, authenticated attacker can exploit this flaw by sending a specially crafted query to the LDAP service that could cause the LDAP service to stop responding. C Tenable Network...
CVE-2013-1282
The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...
Memory corruption
The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...
CVE-2013-1282
CVE-2013-1282 affects the LDAP service in Microsoft Active Directory family (AD DS, ADAM, AD LDS). The vulnerability allows a remote attacker to cause memory consumption and a denial of service by sending a crafted LDAP query, leading to service outage. The root cause is the LDAP service failing ...
CVE-2013-1282
The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...
MS13-032: Vulnerability in Active Directory could lead to denial of service: April 9, 2013
Resolves a vulnerability in Active Directory that could allow denial of service if an attacker sends a specially crafted query to the Lightweight Directory Access Protocol LDAP service.INTRODUCTIONMicrosoft has released security bulletin MS13-032. To view the complete security bulletin, go to one...
Microsoft Windows Active Directory CVE-2013-1282 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial-of-service vulnerability. Successful exploits may allow the attacker to cause the LDAP service to become non-responsive, resulting in denial-of-service conditions. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5....
Microsoft Active Directory LDAP Request Memory Consumption (MS13-032; CVE-2013-1282)
A denial of service vulnerability exists in implementations of Active Directory. Successful exploitation could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query. A Remote attacker can exploit this issue via a speciall...
Fedora 17 : bind-9.9.2-7.P2.fc17 (2013-4533)
Bind-dyndb-ldap was updated to upstream version 2.6. Fixed BIND packages contain dns/rrl.h header necessary for building bind-dyndb-ldap. Fixed CVE-2013-2266. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
Information disclosure
IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...
CVE-2012-0706
IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...
CVE-2012-0706
IBM Scale Out Network Attached Storage SONAS 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine...
CVE-2012-0706
CVE-2012-0706 affects IBM Scale Out NAS (SONAS) 1.3 prior to 1.3.2.3. The embedded LDAP client stores LDAP bind DN and password in cleartext on the local filesystem, enabling an attacker with root access to obtain credentials and potentially access the external LDAP server. IBM notes no vendor fi...
[SECURITY] Fedora 18 Update: 389-ds-base-1.3.0.5-1.fc18
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
Google Active Directory Sync (GADS) Tool 3.1.3 Information Disclosure
Sense of Security - Security Advisory - SOS-13-001 Release Date. 03-Apr-2013 Last Update. - Vendor Notification Date. 03-Sep-2012 Product. Google Active Directory Sync GADS Tool Platform. Windows, Linux, Solaris Affected versions. All versions up to 3.1.3 Severity Rating. High Impact. Exposure of...
Important: Red Hat Security Advisory: JBoss Data Grid 6.1.0 update
JBoss Data Grid 6.1.0, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...
krb5 security update
CentOS Errata and Security Advisory CESA-2013:0656 Updated krb5 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores...