4349 matches found
Microsoft Active Directory LDAP Search Request Buffer Overflow (MS08-060; CVE-2008-4023)
Active Directory is an implementation of LDAP directory services by Microsoft. Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. A remote code execution vulnerability has been reported in Microsoft Windows Active...
Microsoft Windows 2000 Active Directory buffer overflow
Buffer overflow on LDAP request processing...
Microsoft Windows Active Directory LDAP Request Handling Remote Code Execution Vulnerability
Description Microsoft Windows Active Directory is prone to a remote code-execution vulnerability that arises because the application fails to handle specially crafted LDAP or LDAP over SSL LDAPS requests in a proper manner. Successfully exploiting this issue would allow an attacker to execute...
Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution (957280)
Microsoft Security Bulletin MS08-060 – Critical Vulnerability in Active Directory Could Allow Remote Code Execution 957280 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in implementations of Active...
Design/Logic Flaw
Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window...
CVE-2008-2329
Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window...
CVE-2008-2329
CVE-2008-2329 affects Apple Mac OS X 10.5–10.5.4 when Active Directory is used; Directory Services/Login Window allow enumeration of user names via wildcard characters. Impact is user name disclosure with local access, per NVD. OpenVAS references indicate that 10.5.5 Security Update (2008-006) in...
CVE-2008-3539
Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...
HP OpenView Select Identity Connectors本地信息泄漏漏洞
BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID：CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...
default config values restored
This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...
HP Select Identity unauthorized access
Unauthorized access via Active Directory Bidirectional LDAP Connector...
HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01502023 Version: 2 HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access NOTICE: The information in this Security Bulletin...
Design/Logic Flaw
Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2008-1665
Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2008-1665
HP Select Identity Active Directory Bidirectional LDAP Connector vulnerable to remote arbitrary code execution in versions 2.20, 2.20.001, 2.20.002 and 2.30. The HP Security Bulletin (HPSBMA02346 rev.2) confirms a remote unauthorized access risk and provides patches (BiDir ActiveDir Connector 2.3...
CVE-2008-1665
Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...
Securify bulletin: Microsoft Active Directory Denial-of-service
SECURIFY Bulletin: Active Directory Denial-of-service ===================================================== I. SUMMARY: SECURIFY has discovered a denial-of-service vulnerability in Microsoft Active Directory AD in which a domain user sending a specially-crafted LDAP request causes the Active...
Microsoft Security Bulletin MS08-035 – Important Vulnerability in Active Directory Could Allow Denial of Service (953235)
Microsoft Security Bulletin MS08-035 – Important Vulnerability in Active Directory Could Allow Denial of Service 953235 Published: June 10, 2008 | Updated: June 11, 2008 Version: 1.1 General Information Executive Summary This security update resolves a privately reported vulnerability in...
Microsoft Windows活动目录LDAP请求远程拒绝服务漏洞（MS08-035）
BUGTRAQ ID: 29584 CVECAN ID: CVE-2008-1445 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的活动目录组件没有正确地验证LDAP请求，如果远程攻击者向ADAM、活动目录或AD LDS服务器发送了特制的LDAP请求报文的话，就可能导致系统停止响应并自动重新启动。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Microsoft...