Fedora Update for bind-dyndb-ldap FEDORA-2012-11464

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : bind-dyndb-ldap-1.1.0-0.14.rc1.fc16 (2012-11464)

This update fixes CVE-2012-3429 : - named which uses bind-dyndb-ldap plugin could crashed when received query with non-alphabetic character, like '$' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted ...

Fedora 17 : bind-dyndb-ldap-1.1.0-0.14.rc1.fc17 (2012-11470)

This update fixes CVE-2012-3429 : - named which uses bind-dyndb-ldap plugin could crashed when received query with non-alphabetic character, like '$' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted ...

[SECURITY] Fedora 17 Update: bind-dyndb-ldap-1.1.0-0.14.rc1.fc17

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

[SECURITY] Fedora 16 Update: bind-dyndb-ldap-1.1.0-0.14.rc1.fc16

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

Fedora Update for perl-RT-Authen-ExternalAuth FEDORA-2012-11360

Check for the Version of perl-RT-Authen-ExternalAuth OpenVAS Vulnerability Test Fedora Update for perl-RT-Authen-ExternalAuth FEDORA-2012-11360 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for openldap MDVSA-2012:130 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2012:130 openldap Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Search in LDAP the lastLogonTimestamp of Users.

This script search in LDAP the lastLogonTimestamp of Users. OpenVAS Vulnerability Test $Id: GSHBLDAPUserlastlogon.nasl 7279 2017-09-26 13:40:36Z cfischer $ Search in LDAP the lastLogonTimestamp of Users. Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Search in LDAP the lastLogonTimestamp of Users.

This script search in LDAP the lastLogonTimestamp of Users. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 17 Update: perl-RT-Authen-ExternalAuth-0.11-1.fc17

A complete package for adding external authentication mechanisms to RT. It currently supports LDAP via Net::LDAP and External Database authentication for any database with an installed DBI driver...

[SECURITY] Fedora 16 Update: perl-RT-Authen-ExternalAuth-0.11-1.fc16

A complete package for adding external authentication mechanisms to RT. It currently supports LDAP via Net::LDAP and External Database authentication for any database with an installed DBI driver...

RedHat Update for openldap RHSA-2012:1151-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2012:1151-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2012-3429

The dnstoldapdnescape function in src/ldapconvert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names DN for LDAP queries, which allows remote DNS servers to cause a denial of service named service hang via a "$" character in a DN in a DNS query...

Code injection

The dnstoldapdnescape function in src/ldapconvert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names DN for LDAP queries, which allows remote DNS servers to cause a denial of service named service hang via a "$" character in a DN in a DNS query...

CVE-2012-3429

The dnstoldapdnescape function in src/ldapconvert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names DN for LDAP queries, which allows remote DNS servers to cause a denial of service named service hang via a "$" character in a DN in a DNS query...

CVE-2012-3429

CVE-2012-3429 details (CVE entry not rejected): The dns_to_ldap_dn_escape function in src/ldap_convert.c of bind-dyndb-ldap 1.1.0rc1 and earlier fails to properly escape DNs in LDAP queries. This allows a remote DNS server to trigger a denial of service (named service hang) via a ‘$’ character in...

CVE-2012-3429

Removed by vendor...

Scientific Linux Security Update : bind-dyndb-ldap on SL6.x i386/x86_64 (20120803)

The dynamic LDAP back end is a plug-in for BIND that provides back-end capabilities to LDAP databases. It features support for dynamic updates and internal caching that help to reduce the load on LDAP servers. A flaw was found in the way bind-dyndb-ldap performed the escaping of names from DNS...

Add an option in User Directory settings to make an SSL LDAP connection but without verifying that the hostname and certificate match

Starting JIRA 5.1, the embedded crowd has been upgraded from version 2.3.2 to 2.4. This includes the security fix CWD-2690 won't be visible to public that has been announced in Crowd 2.3.6 release notes - Crowd 2.3.6 Release...

Add an option in User Directory settings to make an SSL LDAP connection but without verifying that the hostname and certificate match

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-29213. panel Starting JIRA 5.1, the embedded crowd has been upgraded from version 2.3.2 to 2.4. This includes the security fix CWD-2690 won'...