CVE-2010-3282

CVE-2010-3282 covers a local information disclosure in HP-UX Directory Server and Red Hat Directory Server for HP-UX where audit logging logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, enabling local users to read sensitive data from logs....

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Directory Server (Tivoli) & Rational Directory Administrator

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 and Version 8 used by Rational Directory Server Tivoli and Rational Directory Administrator. These issues were disclosed as part of the IBM Java SDK updates in October 2019. Upgrade the JRE in order to resolve...

Important: Red Hat Security Advisory: 389-ds-base security and bug fix update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Red Hat 389 Directory Server Information Disclosure Vulnerability (CNVD-2020-03178)

Red Hat 389 Directory Server is an enterprise-class Linux directory server. A security vulnerability exists in the Red Hat 389 Directory Server verbose mode, which can be exploited by a remote attacker to submit a special request that can be used to obtain sensitive information...

389-ds:1.4 security, bug fix, and enhancement update

...

Red Hat Directory Server and 389 Directory Server Code Issue Vulnerability

Red Hat 389 Directory Server formerly known as Fedora Directory Server and Red Hat Directory Server are both products of Red Hat, Inc.389 Directory Server is an enterprise-class Linux directory server. The server fully supports the LDAPv3 specification and features scalability, multi-master...

DEBIAN-CVE-2019-14824

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes...

UBUNTU-CVE-2019-14824

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes...

Important: Red Hat Security Advisory: 389-ds:1.4 security, bug fix, and enhancement update

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

389-ds-base: Read permission check bypass via the deref plugin

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes...

CVE-2010-2222

The gerparsecontrol function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service NULL pointer dereference via a crafted search query...

Null pointer dereference

The gerparsecontrol function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service NULL pointer dereference via a crafted search query...

CVE-2010-2222

The gerparsecontrol function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service NULL pointer dereference via a crafted search query...

CVE-2010-2222

The CVE-2010-2222 issue affects Red Hat Directory Server 8 and 389 Directory Server, arising from the _ger_parse_control function. The root cause is a code issue in this function that allows a crafted search query to trigger a denial of service via a NULL pointer dereference. Documented impact in...

Red Hat 389 Directory Server deref plugin permission check bypass vulnerability

Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat, USA. The server fully supports the LDAPv3 specification and features scalability, multi-master replication, etc. deref is one of the deref plug-ins. A privilege check...

Unspecified Vulnerability in IBM Security Directory Server

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. A security vulnerability exists in IBM Security Directory...

Unspecified Vulnerability in IBM Security Directory Server (CNVD-2019-38504)

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. A security vulnerability exists in IBM Security Directory...

IBM Security Directory Server Information Disclosure Vulnerability

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. A security vulnerability exists in IBM Security Directory...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server (CVE-2019-4268)

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Directory Server ISDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin listed in the...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server (CVE-2019-4270)

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Directory Server ISDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the Security Bulletins listed in the...