CVE-2010-0211

The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, which allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a modrdn call with an RDN string containing...

CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

CVE-2010-0211

The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, which allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a modrdn call with an RDN string containing...

CVE-2010-0211

The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, which allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a modrdn call with an RDN string containing...

Fedora Update for fedora-ds-base FEDORA-2008-7813

Check for the Version of fedora-ds-base OpenVAS Vulnerability Test Fedora Update for fedora-ds-base FEDORA-2008-7813 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

[SECURITY] Fedora 8 Update: fedora-ds-base-1.1.2-1.fc8

Fedora Directory Server is an LDAPv3 compliant server. The base package in cludes the LDAP server and command line utilities for server administration...

[SECURITY] Fedora 9 Update: fedora-ds-base-1.1.2-1.fc9

Fedora Directory Server is an LDAPv3 compliant server. The base package in cludes the LDAP server and command line utilities for server administration...

Moderate: Red Hat Security Advisory: redhat-ds-base security and bug fix update

Updated redhat-ds-base packages are now available that fix security issues and various bugs for Red Hat Enterprise IPA. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server. Multiple...

Red Hat Directory Server接受语言HTTP头字段缓冲区溢出漏洞

BUGTRAQ ID: 30869 CVE ID: CVE-2008-2928 CNCVE ID：CNCVE-20082928 Red Hat Directory Server是一款LDAPv3兼容的目录服务程序。 Red Hat Directory Server包含的对个CGI应用吃呢供需处理Accept-Language HTTP头字段存在缓冲区溢出，远程攻击者可以利用漏洞以管理服务器应用程序权限执行任意指令。 能访问管理服务器WEB接口的攻击者可使用这个漏洞使这些CGI应用程序崩溃，或者可能以应用程序权限执行任意代码。注意：Red Hat Directory Server...

Red Hat Directory Server多个跨站脚本漏洞

BUGTRAQ ID: 30870 CVE ID: CVE-2008-2929 CNCVE ID：CNCVE-20082929 Red Hat Directory Server是一款LDAPv3兼容的目录服务程序。 Directory Server Administration Express和Directory Server Gateway DSGWWEB接口不正确处理用户提供的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是由于WEB接口不正确解析用户提供的"%"转义字符，可利用这个问题触发跨站脚本攻击，可获得管理员等用户敏感信息。 RedHat Fedora...

Moderate: Red Hat Security Advisory: adminutil security update

An updated adminutil package that fixes a security issue is now available for Red Hat Directory Server 8.0. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant server. The adminutil packages is...

Critical: Red Hat Security Advisory: redhat-ds-base security update

An updated redhat-ds-base package that fixes a security issue is now available for Red Hat Directory Server 8.0. This update has been rated as having critical security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3 compliant server. The redhat-ds-base package...

Critical: Red Hat Security Advisory: redhat-ds-admin security update

An updated redhat-ds-admin package that fixes security issues is now available for Red Hat Directory Server 8.0. This update has been rated as having critical security impact by the Red Hat Security Response Team. Red Hat Administration Server is an HTTP agent that provides management features fo...

CVE-2003-0378

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...

CVE-2003-0378

The CVE-2003-0378 issue affects Mac OS X when Kerberos login is used with LDAPv3 and LDAP bind authentication; if AuthenticationAuthority is not set, cleartext passwords may be sent to the LDAP server during the authentication fallback. Impact is plaintext password exposure over the network; reme...

CVE-2003-0378: Undefined Security Weakness

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...

CVE-2001-1321

Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1308

CVE-2001-1308 involves format-string vulnerabilities in the iPlanet Directory Server, version 4.1.4 and earlier, in the LDAP handling code. The flaws allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...