nss-ldapd Weak file permissions

/etc/nss-ldapd.conf flie with LDAP password is world readable...

Debian DSA-1758-1 : nss-ldapd - insecure config file creation

Leigh James discovered that nss-ldapd, an NSS module for using LDAP as a naming service, by default creates the configuration file /etc/nss-ldapd.conf world-readable which could leak the configured LDAP password if one is used for connecting to the LDAP server. %NASLMINLEVEL 70300 C Tenable Netwo...

CVE-2009-1073

nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...

Default credentials

nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...

CVE-2009-1073

Summary of CVE-2009-1073 : The nss-ldapd package (before 0.6.8) creates /etc/nss-ldapd.conf with world-readable permissions, allowing local users to read the bindpw (LDAP password) and potentially disclose credentials. Public sources (Debian, OpenVAS, Nessus) confirm the issue and reference fixes...

CVE-2009-1073

nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...

PT-2009-1033 · Nss Ldap · Nss Ldap

Name of the Vulnerable Software and Affected Versions: nss-ldapd versions prior to 0.6.8 Description: The issue is related to errors in privilege management, allowing a local user to obtain the cleartext password for the LDAP server. This can be achieved by reading the bindpw field from the...

[SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1758-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2009 http://www.debian.org/security/faq -...

DSA-1758-1 nss-ldapd - information disclosure

Bulletin has no description...

Study: IE8 best at blocking malware sites

By Gregg Keizer, Computerworld A recently released report claims that Internet Explorer 8 IE8 is more than twice as effective at blocking malware sites than its nearest rival. According to NSS Labs, which conducted the Microsoft-sponsored study, IE8 blocked 69% of the 492 malware-distributing Web...

Ubuntu Update for mozilla-thunderbird vulnerabilities USN-431-1

Ubuntu Update for Linux kernel vulnerabilities USN-431-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4311.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mozilla-thunderbird vulnerabilities USN-431-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-431-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-740-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-740-1: NSS vulnerability

The MD5 algorithm is known not to be collision resistant. This update blocklists the proof of concept rogue certificate authority as discussed in http://www.win.tue.nl/hashclash/rogue-ca/...

Fedora Update for nss FEDORA-2007-279

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2007-279 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

Fedora Update for nss FEDORA-2007-279

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for nss FEDORA-2007-278

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure

Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...

Fedora Core 10 FEDORA-2009-1291 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1291. OpenVAS Vulnerability Test $Id: fcore20091291.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1291 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 9 FEDORA-2009-1276 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1276. OpenVAS Vulnerability Test $Id: fcore20091276.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1276 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...