5321 matches found
MS08-035: Vulnerability in Active Directory Could Allow Denial of Service (953235)
The remote version of Active Directory contains a denial of service vulnerability when processing LDAP requests. An attacker can exploit this flaw to crash the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33138; scriptversion"1.31";...
Microsoft Windows Active Directory LDAP Request Validation Remote Denial Of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability because Microsoft Active Directory, ADAM Active Directory Application Mode, and AD LDS Active Directory Lightweight Directory Service fail to handle specially crafted Lightweight Directory Access Protocol LDAP...
Microsoft Active Directory LDAP Request Denial of Service (MS08-035; CVE-2008-1445)
Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service.A denial of service vulnerability has been reported in...
GLSA-200804-24 : DBmail: Data disclosure
The remote host is affected by the vulnerability described in GLSA-200804-24 DBmail: Data disclosure A vulnerability in DBMail's authldap module when used in conjunction with an Active Directory server has been reported by vugluskr. When passing a zero length password to the module, it tries to...
DBmail: Data disclosure
Background DBMail is a mail storage and retrieval daemon that uses SQL databases as its data store. IMAP and POP3 can be used to retrieve mails from the database. Description A vulnerability in DBMail's authldap module when used in conjunction with an Active Directory server has been reported by...
Authentication flaw
DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...
CVE-2007-6714
DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...
CVE-2007-6714
DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...
CVE-2008-0088
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...
Cross site request forgery (csrf)
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...
CVE-2008-0088
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...
CVE-2008-0088
Summary: CVE-2008-0088 describes a denial-of-service in Microsoft Active Directory and ADAM caused by improper validation of crafted LDAP requests. Affected components include Active Directory on Windows 2000 Server and Windows Server 2003, and ADAM on Windows XP/Server 2003. The underlying root ...
Microsoft Windows Active Directory LDAP Request Validation Remote Denial Of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability because Microsoft Active Directory and ADAM Active Directory Application Mode fail to handle specially crafted Lightweight Directory Access Protocol LDAP requests. An attacker can exploit this issue to cause the...
Microsoft Security Bulletin MS08-003 – Important Vulnerability in Active Directory Could Allow Denial of Service (946538)
Microsoft Security Bulletin MS08-003 – Important Vulnerability in Active Directory Could Allow Denial of Service 946538 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability in implementations of...
CVE-2008-0088: Improper Input Validation
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode ADAM on XP and Server 2003, allows remote attackers to cause a denial of service hang and restart via a crafted LDAP request...
Microsoft Windows Active Directory DoS
Crash on LDAP request handling...
MS08-003: Vulnerability in Active Directory Could Allow Denial of Service (946538)
The remote version of Active Directory contains a flaw in the LDAP request handler code that allows an attacker to crash the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31037; scriptversion"1.28"; scriptcvsdate"Date: 2018/11/15...
Microsoft Active Directory LDAP Query Handling Denial of Service (MS08-003; CVE-2008-0088)
Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. A vulnerability was discovered in Microsoft Active Directory that enables an attacker to cause a Denial-of-Service DoS condition...
JIRA Portlet Macro not displaying when authenticating using the trusted application between JIRA and Confluence
We're having issues using the JIRA portlet macro jiraportlet on pages inside Confluence. Whenever we try to use this macro using the trust between JIRA and Confluence for authentication, the macro does not display on the page. There aren't any errors, it just doesn't appear. code...
Authentication flaw
IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory AD LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password...