Microsoft Windows Active Directory LDAP Request Handling Remote Code Execution Vulnerability

Description Microsoft Windows Active Directory is prone to a remote code-execution vulnerability that arises because the application fails to handle specially crafted LDAP or LDAP over SSL LDAPS requests in a proper manner. Successfully exploiting this issue would allow an attacker to execute...

Microsoft Active Directory LDAP Search Request Buffer Overflow (MS08-060; CVE-2008-4023)

Active Directory is an implementation of LDAP directory services by Microsoft. Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. A remote code execution vulnerability has been reported in Microsoft Windows Active...

Microsoft Windows 2000 Active Directory buffer overflow

Buffer overflow on LDAP request processing...

Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution (957280)

Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution 957280 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in implementations of Active...

CVE-2008-2329

Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window...

Design/Logic Flaw

Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window...

CVE-2008-2329

CVE-2008-2329 affects Apple Mac OS X 10.5–10.5.4 when Active Directory is used; Directory Services/Login Window allow enumeration of user names via wildcard characters. Impact is user name disclosure with local access, per NVD. OpenVAS references indicate that 10.5.5 Security Update (2008-006) in...

CVE-2008-2329: Exposure of Sensitive Information to an Unauthorized Actor

Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window...

CVE-2008-3539

Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...

HP OpenView Select Identity Connectors本地信息泄漏漏洞

BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID：CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...

CVE-2008-3539: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

HP Select Identity unauthorized access

Unauthorized access via Active Directory Bidirectional LDAP Connector...

HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01502023 Version: 2 HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access NOTICE: The information in this Security Bulletin...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665

HP Select Identity Active Directory Bidirectional LDAP Connector vulnerable to remote arbitrary code execution in versions 2.20, 2.20.001, 2.20.002 and 2.30. The HP Security Bulletin (HPSBMA02346 rev.2) confirms a remote unauthorized access risk and provides patches (BiDir ActiveDir Connector 2.3...

CVE-2008-1665: Undefined Security Weakness

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

Microsoft Windows活动目录LDAP请求远程拒绝服务漏洞（MS08-035）

BUGTRAQ ID: 29584 CVECAN ID: CVE-2008-1445 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的活动目录组件没有正确地验证LDAP请求，如果远程攻击者向ADAM、活动目录或AD LDS服务器发送了特制的LDAP请求报文的话，就可能导致系统停止响应并自动重新启动。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft...