Server: crash with multiple simple paged result searches

slapd aka ns-slapd in 389 Directory Server 1.2.7.5 aka Red Hat Directory Server 8.2.x or dirsrv does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service daemon crash or possibly have unspecified other impact via multiple search requests...

Server: insecure pid file directory permissions

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

Server: use of insecure LD_LIBRARY_PATH settings

The 1 backup and restore scripts, 2 main initialization script, and 3 ldap-agent script in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

The host is running IBM Tivoli Directory Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmtivolidirserverdigestmd5dosvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability Authors: Sooraj KS...

IBM Tivoli Directory Server LDAP BER Denial of Service Vulnerability

The host is running IBM Tivoli Directory Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmtivolidirserverberldapdosvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ IBM Tivoli Directory Server LDAP BER Denial of Service Vulnerability Authors: Sooraj KS...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Proxy Server Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Server Detection (LDAP)

LDAP based detection of IBM Tivoli Directory Server. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Server LDAP BER Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4216

IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service daemon crash via vectors involving a buffer that has a memory address near the maximum...

CVE-2010-4217

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service daemon crash via an unbind request that occurs during a certain search operation...

Design/Logic Flaw

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service daemon crash via an unbind request that occurs during a certain search operation...

Buffer overflow

IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service daemon crash via vectors involving a buffer that has a memory address near the maximum...

CVE-2010-4217

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service daemon crash via an unbind request that occurs during a certain search operation...

CVE-2010-4217

CVE-2010-4217 affects IBM Tivoli Directory Proxy Server (TDS) and is a use-after-free in the proxy server. The vulnerability allows remote attackers to cause a daemon crash (DoS) by sending an unbind request during a certain search operation. Affected versions are TDS 6.0.0.x before 6.0.0.8-TIV-I...

CVE-2010-4216

CVE-2010-4216 concerns IBM Tivoli Directory Server (TDS) 6.0.0.x prior to 6.0.0.8-TIV-ITDS-IF0007. The vulnerability arises from improper handling of invalid buffer references in LDAP BER requests, which can allow a remote attacker to trigger a denial of service (daemon crash) via vectors involvi...

CVE-2010-4216

IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service daemon crash via vectors involving a buffer that has a memory address near the maximum...

Security feature bypass

Unspecified vulnerability in the Directory Server Enterprise Edition component in Oracle Sun Products Suite 6.0, 6.1, 6.2, and 6.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Identity Synchronization for Windows...

CVE-2010-3535

CVE-2010-3535 affects the Directory Server Enterprise Edition component of Oracle Sun Product Suite (versions 6.0–6.3). The vulnerability is described as unspecified and exploitable via Identity Synchronization for Windows, with potential impact to confidentiality, integrity, and availability. Th...

[security bulletin] HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02522633 Version: 1 HPSBUX02587 SSRT100215 rev.1 - HP-UX Directory Server and Red Hat Directory Server for HP-UX, Local Disclosure of Information, Privilege Escalation NOTICE: The information in...