UBUNTU-CVE-2015-2704

realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sssd-tools-1.5.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the sssd-1.9.2 package of the CentOS operating system can be exploited, leading to violations of confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the authentication process...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the sssd-client-1.9.2 package for the CentOS operating system can be exploited, leading to violations of confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the authentication process...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the sssd-debuginfo-1.9.2 package of the CentOS operating system can be exploited by a malicious individual to compromise the confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the sssd-tools-1.9.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the authentication process...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sssd-debuginfo-1.5.1 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sssd-client-1.5.1 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sssd-1.5.1 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the sssd-debuginfo-1.9.2 package of the Red Hat Enterprise Linux operating system can be exploited, leading to violations of confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the sssd-client-1.9.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the authentication proces...

Low: Red Hat Bug Fix Advisory: sssd bug fix and enhancement update

Updated sssd packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. The System Security Services Daemon SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms. This update adds several enhancements...

openSUSE Security Update : sssd (openSUSE-SU-2014:1407-1)

sssd was updated to new upstream release 1.12.2 bugfix release, bnc900159 Changes : - Fixed a regression where the IPA provider did not fetch User Private Groups correctly - An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. - Several new options...

CentOS 6 : sudo (CESA-2013:1701)

An updated sudo package that fixes two security issues, several bugs, and adds two enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CentOS 5 : sssd (CESA-2013:1319)

Updated sssd packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Low: Red Hat Bug Fix Advisory: sssd bug fix and enhancement update

Updated sssd packages that fix numerous bugs and add various enhancements are now available for Red Hat Enterprise Linux 6. The System Security Services Daemon SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides the Name Service Switch...

openSUSE Security Update : sssd (openSUSE-SU-2013:0559-1)

When SSSD is configured as an Active Directory client by using the new Active Directory provider or equivalent configuration of the LDAP provider, the Simple Access Provider does not handle access control correctly. If any groups are specified with the simpledenygroups option, the group members a...

DEBIAN-CVE-2014-0249

The System Security Services Daemon SSSD 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors...

CVE-2014-0249

The System Security Services Daemon SSSD 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors...

Design/Logic Flaw

The System Security Services Daemon SSSD 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors...