Cross site request forgery (csrf)

Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service system hang or reboot via a crafted LDAP request...

CVE-2008-1445

Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service system hang or reboot via a crafted LDAP request...

CVE-2008-1445

Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service system hang or reboot via a crafted LDAP request...

CVE-2008-1445

CVE-2008-1445 corresponds to a denial-of-service vulnerability in Active Directory affecting Windows 2000 Server SP4, Windows XP Professional SP2/SP3, Windows Server 2003 SP1/SP2, and Windows Server 2008. The issue arises from insufficient validation of specially crafted LDAP requests, allowing r...

MS08-035: Vulnerability in Active Directory Could Allow Denial of Service (953235)

The remote version of Active Directory contains a denial of service vulnerability when processing LDAP requests. An attacker can exploit this flaw to crash the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33138; scriptversion"1.31";...

Microsoft Windows Active Directory LDAP Request Validation Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because Microsoft Active Directory, ADAM Active Directory Application Mode, and AD LDS Active Directory Lightweight Directory Service fail to handle specially crafted Lightweight Directory Access Protocol LDAP...

Microsoft Active Directory LDAP Request Denial of Service (MS08-035; CVE-2008-1445)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service.A denial of service vulnerability has been reported in...

GLSA-200804-24 : DBmail: Data disclosure

The remote host is affected by the vulnerability described in GLSA-200804-24 DBmail: Data disclosure A vulnerability in DBMail's authldap module when used in conjunction with an Active Directory server has been reported by vugluskr. When passing a zero length password to the module, it tries to...

DBmail: Data disclosure

Background DBMail is a mail storage and retrieval daemon that uses SQL databases as its data store. IMAP and POP3 can be used to retrieve mails from the database. Description A vulnerability in DBMail's authldap module when used in conjunction with an Active Directory server has been reported by...

CVE-2007-6714

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...

Authentication flaw

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...

CVE-2007-6714

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...

CVE-2008-0088

Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...

Cross site request forgery (csrf)

Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...

CVE-2008-0088

Summary: CVE-2008-0088 describes a denial-of-service in Microsoft Active Directory and ADAM caused by improper validation of crafted LDAP requests. Affected components include Active Directory on Windows 2000 Server and Windows Server 2003, and ADAM on Windows XP/Server 2003. The underlying root ...

CVE-2008-0088

Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...

Microsoft Windows Active Directory DoS

Crash on LDAP request handling...

Microsoft Windows Active Directory LDAP Request Validation Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because Microsoft Active Directory and ADAM Active Directory Application Mode fail to handle specially crafted Lightweight Directory Access Protocol LDAP requests. An attacker can exploit this issue to cause the...

Microsoft Security Bulletin MS08-003 – Important Vulnerability in Active Directory Could Allow Denial of Service (946538)

Microsoft Security Bulletin MS08-003 – Important Vulnerability in Active Directory Could Allow Denial of Service 946538 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability in implementations of...

MS08-003: Vulnerability in Active Directory Could Allow Denial of Service (946538)

The remote version of Active Directory contains a flaw in the LDAP request handler code that allows an attacker to crash the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31037; scriptversion"1.28"; scriptcvsdate"Date: 2018/11/15...