942 matches found
OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)
It was discovered that the LDAPCertStore class in the Security component of OpenJDK followed LDAP referrals to arbitrary URLs. A specially crafted LDAP referral URL could cause LDAPCertStore to communicate with non-LDAP servers...
[SECURITY] Fedora 25 Update: openldap-2.4.44-11.fc25
OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...
Windows Privilege Escalation
The vulnerability of the Windows operating system is related to incorrect calculations of buffer lengths during LDAP requests. Exploiting this vulnerability allows a malicious actor to enhance their privileges by running specially created applications remotely...
Microsoft Windows Monthly Rollup (KB4015551)
This host is missing a monthly rollup according to Microsoft KB4015551. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Monthly Rollup (KB4015549)
This host is missing a monthly rollup according to Microsoft security update KB4015549. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
389 security update
CentOS Errata and Security Advisory CESA-2017:0893 An update for 389-ds-base is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
April 11, 2017—KB4015548 (Security-only update)
None None...
OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)
It was discovered that the JAAS component of OpenJDK did not use the correct way to extract user DN from the result of the user search LDAP query. A specially crafted user LDAP entry could cause the application to use an incorrect DN...
ALPINE-CVE-2016-7930
The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llcprint...
CVE-2017-3249
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle GlassFish...
OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)
It was discovered that the JAAS component of OpenJDK did not use the correct way to extract user DN from the result of the user search LDAP query. A specially crafted user LDAP entry could cause the application to use an incorrect DN...
OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)
It was discovered that the JAAS component of OpenJDK did not use the correct way to extract user DN from the result of the user search LDAP query. A specially crafted user LDAP entry could cause the application to use an incorrect DN...
CVE-2016-8296
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to LDAP...
Backdoor Account Vulnerability in Telnet Service on D-Link DWR-932B LET Router
The D-Link DWR-932B LET is a wireless router. A backdoor account vulnerability exists in the Telnet service of the D-Link DWR-932B LET router. Since the D-Link wireless router runs Telnet service with two hard-coded secret accounts admin:admin and root:1234 by default, an attacker can exploit the...
Unified Infrastructure Manager LDAP Authentication Bypass
The vulnerability of the Unified Infrastructure Manager’s IT-infrastructure monitoring software exists due to an error in the access management subsystem. Exploiting this vulnerability allows a malicious actor to bypass the authentication process through the LDAP service, by providing only the...
Windows Privilege Escalation
The vulnerability of the Windows operating system is related to errors during LDAP authentication. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability
Cisco Prime Collaboration Provisioning is a Web-based, next-generation communications services solution from Cisco. The solution provides IP communication services capabilities for IP telephony, voicemail, and unified communications environments. An authentication bypass vulnerability exists in t...
Microsoft Windows Group Policy Elevation of Privilege Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Group Policy due to Windows incorrectly handling LDAP authentication. Allowing an attacker to modify Group Policy update data within a...
DEBIAN-CVE-2016-2112
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream...
Unspecified Vulnerability in Oracle Sun Solaris PAM LDAP Subcomponent
Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. A security vulnerability in the PAM LDAP subcomponent in Oracle Sun Solaris version 10 and 11.3 can be exploited by a local attacker to compromise the confidentiality, integrity, and availability of data by controlling the...