2289 matches found
Sun Java System Directory Server 7.0 - 'core_get_proxyauth_dn' Denial of Service
source: https://www.securityfocus.com/bid/37699/info Sun Java System Directory Server is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the effected application, denying service to legitimate users. Directory Server 7.0 is vulnerable; other versions may al...
Code injection
Unspecified vulnerability in the psearch aka persistent search functionality in Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service psearch outage by using a crafted psearch client to send request...
CVE-2009-4442
Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting, which allows remote attackers to cause a denial of service connection slot exhaustion by making multiple connections an...
Directory traversal
Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable the SOKEEPALIVE socket option, which makes it easier for remote attackers to cause a denial of service connection slot exhaustion via multiple connections, aka Bug Id 6782659...
CVE-2009-4441
CVE-2009-4441 affects Sun Java System Directory Proxy Server (DPS) 6.x prior to 6.3.1.1, bundled with Sun Java System Directory Server Enterprise Edition. The root cause is that DPS/DSEE fails to enable the SO_KEEPALIVE socket option, enabling remote attackers to cause a denial of service via con...
CVE-2009-4443
Unspecified vulnerability in the psearch aka persistent search functionality in Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service psearch outage by using a crafted psearch client to send request...
CVE-2009-4440
Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges o...
Novell eDirectory HTTP Request Content-Length Heap Buffer Overflow (CVE-2008-4478)
Novell eDirectory is an X.500 and LDAP compatible directory server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. There exists a heap buffer overflow vulnerability in Novell...
Red Hat Directory Server Accept-Language HTTP Header Parsing Buffer Overflow (CVE-2008-2928)
Red Hat Directory Server is an LDAP-based server that centralizes application settings, user profiles, group data, policies, and access control information into an operating system-independent, network-based registry. Fedora Directory Server is a free version of Red Hat Directory Server. There...
Novell eDirectory DHost HTTPSTK buffer overflow
Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...
Novell eDirectory DHost module load buffer overflow
Added: 10/30/2009 BID: 36815 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...
Solaris 10 (x86) : 114273-04 (deprecated)
SunOS 5.9x86 5.10x86: Sun ONE Directory Server 5.1 patch. Date this patch was last updated by Sun : Mar/15/05 This plugin has been deprecated and either replaced with individual 114273 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Solaris 10 (sparc) : 113859-04 (deprecated)
SunOS 5.9 5.10: Sun ONE Directory Server 5.1 patch. Date this patch was last updated by Sun : Mar/15/05 This plugin has been deprecated and either replaced with individual 113859 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Code injection
Unspecified vulnerability in IBM Tivoli Directory Server TDS 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However...
CVE-2009-3088
Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server TDS 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this...
CVE-2009-3089
IBM Tivoli Directory Server TDS 6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors, related to 1 the ibmslapd.exe daemon on Windows and 2 the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain...
Heap overflow
Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory Server TDS 6.0 on Linux allows remote attackers to have an unspecified impact via unknown vectors that trigger heap corruption, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this...
CVE-2009-3090
Unspecified vulnerability in IBM Tivoli Directory Server TDS 6.0 on Linux allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However...
CVE-2009-3088
CVE-2009-3088 describes a heap-based buffer overflow in the ibmdiradm component of IBM Tivoli Directory Server (TDS) 6.0 on Linux. The root cause is a heap corruption triggered by unknown vectors, allowing remote attackers to impact the system in an unspecified way. The issue is exploitable over ...