Debian DSA-1943-1 : openldap openldap2.3 - insufficient input validation

It was discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof...

ldap-rootdse NSE Script

Retrieves the LDAP root DSA-specific Entry DSE Example Usage nmap -p 389 --script ldap-rootdse Script Output PORT STATE SERVICE 389/tcp open ldap | ldap-rootdse: | currentTime: 20100112092616.0Z | subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=cqure,DC=net | dsServiceName: CN=NTDS...

Mandriva Update for openldap MDVSA-2010:026 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2010:026 openldap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openldap MDVSA-2010:026 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2010:026 openldap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : openldap (MDVSA-2010:026)

A vulnerability was discovered and corrected in openldap : libraries/libldap/tlso.c in OpenLDAP, when OpenSSL is used, does not properly handle a '' NUL character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof...

Debian Security Advisory DSA 1943-1 (openldap openldap2.3)

The remote host is missing an update to openldap openldap2.3 announced via advisory DSA 1943-1. OpenVAS Vulnerability Test $Id: deb19431.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1943-1 openldap openldap2.3 Authors: Thomas Reinke Copyright: Copyright ...

Debian: Security Advisory (DSA-1943-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:308)

Multiple vulnerabilities has been found and corrected in gnutls : gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related ...

[SECURITY] [DSA 1943-1] New openldap2.3/openldap packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1943 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 02, 2009 http://www.debian.org/security/faq -...

DSA-1943-1 openldap openldap2.3 - SSL certificate

Bulletin has no description...

Ubuntu USN-858-1 (openldap2.2)

The remote host is missing an update to openldap2.2 announced via advisory USN-858-1. OpenVAS Vulnerability Test $Id: ubuntu8581.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8581.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-858-1 openldap2.2 Authors:...

Ubuntu 6.06 LTS : openldap2.2 vulnerability (USN-858-1)

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracte...

[USN-858-1] OpenLDAP vulnerability

=========================================================== Ubuntu Security Notice USN-858-1 November 12, 2009 openldap2.2 vulnerability CVE-2009-3767 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory...

OpenLDAP certificate spoofing

zero byte in common name is handled incorrectly...

USN-858-1: OpenLDAP vulnerability

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities

Binary data 800795.prm...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

No description provided by source. Attackers use readily available LDAP commands to exploit this issue. The following command demonstrates this issue: ldapmodrdn -x -h :389 -D dn -w pw -e \noop ou=test,dc=my-domain,dc=com ou=test2...

OpenLDAP 2.3.39 - MODRDN Remote Denial of Service

Attackers use readily available LDAP commands to exploit this issue. source: https://www.securityfocus.com/bid/27778/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users. OpenLDAP 2.3.39 is vulnerable to this issu...

Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ============================================================= OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability ============================================================= Title: OpenLDAP 2.3.39 MODRDN Remote Denial of Service...