Microsoft Active Directory LDAP Query Handling Denial of Service (MS08-003; CVE-2008-0088)

Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. A vulnerability was discovered in Microsoft Active Directory that enables an attacker to cause a Denial-of-Service DoS condition...

JIRA Portlet Macro not displaying when authenticating using the trusted application between JIRA and Confluence

We're having issues using the JIRA portlet macro jiraportlet on pages inside Confluence. Whenever we try to use this macro using the trust between JIRA and Confluence for authentication, the macro does not display on the page. There aren't any errors, it just doesn't appear. code...

Authentication flaw

IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...

CVE-2007-6363

IBM Tivoli Netcool Security Manager 1.3.0 is affected by CVE-2007-6363: before Interim Fix 1, AD LDAP authentication allows remote attackers to obtain login access without a password via unspecified vectors. This impacts authentication bypass with AD LDAP and could permit unauthorized access. A f...

CVE-2007-6363

IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...

CVE-2002-2328

Technical details for CVE-2002-2328 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates from Red Hat/NVD/CVE sources.

CVE-2002-2328

Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service hang via an LDAP client that sets the page length to zero during a large request...

Cisco Unified Communications管理应用程序特权提升漏洞

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications管理应用程序包含的基于WEB的工具存在访问验证问题，远程攻击者可以利用漏洞访问设备敏感信息和更改应用程序配置。 Cisco Unified ICME, Unified ICMH, UCCE,...

Cisco Unified Communications unaurhoized access

Any active directory user has access to web administration tools...

Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability Document ID: 97836 Advisory ID: cisco-sa-20071017-IPCC http://www.cisco.com/warp/public/707/cisco-sa-20071017-IPCC.shtml Revision 1.0 For Public Release 2007...

FreeBSD : samba -- nss_info plugin privilege escalation vulnerability (2bc96f18-683f-11dc-82b6-02e0185f8d72)

The Samba development team reports : The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the 'winbind nss info' smb.conf...

Incorrect primary group assignment for

Description The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the "winbind nss info" smb.conf option to either "sfu" or...

[SECURITY] Winbind's rfc2307 & SFU nss_info plugin in Samba 3.0.25[a-c] assigns users a primary gid of 0 by default

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Incorrect primary group assignment for == domain users using the rfc2307 or sfu == winbind nss info plugin. == == CVE ID: CVE-2007-4138 == == Versions: Samba 3.0.25 - 3.0.25c...

samba -- nss_info plugin privilege escalation vulnerability

The Samba development team reports: The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the "winbind nss info" smb.conf...

Microsoft Windows活动目录LDAP请求验证远程拒绝服务漏洞（MS07-039）

BUGTRAQ ID: 24796 CVECAN ID: CVE-2007-3028 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft活动目录在处理畸形的请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 Microsoft活动目录没有正确地验证LDAP请求中可转换属性的数量，攻击者可能通过向运行活动目录的服务器发送特制的LDAP请求来利用该漏洞，成功利用此漏洞的攻击者可能导致服务器暂时停止响应。 Microsoft Windows 2000 Server SP4 临时解决方法： 在防火墙处阻止TCP端口389和3268。...

Microsoft Windows Active Directory array overflow

Array index overflow on LDAP request parsing...

Microsoft Windows Active Directory fails to properly validate client sent LDAP requests

Overview Microsoft Windows Active Directory fails to properly validate client-sent LDAP requests and may result in a denial of service condition. Description Microsoft Windows Active Directory contains a vulnerability in the way that the LDAP service validates the number of convertible attributes...

Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039; CVE-2007-0040)

Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. Multiple vulnerabilities have been reported in Microsoft Windows Active Directory. The flaws are in the way the Active Directory handles LDAP requests. The...

Low Risk Vulnerability in Active Directory

Peter Winter-Smith of NGSSoftware has discovered a low risk vulnerability in Active Directory which can allow an unauthenticated user to cause a denial of service condition on any affected system. The only affected platform is Windows 2000 with Active Directory. Windows 2003 Server is NOT affecte...

MS07-039: Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122) (uncredentialed check)

The remote version of Active Directory contains a flaw in the LDAP request handler code that may allow an attacker to execute code on the remote host. On Windows 2000, an anonymous attacker can exploit this flaw by sending a specially crafted LDAP packet. Additionally, Active Directory is affecte...