The vulnerability of the 389 Directory Server catalog service server arises from synchronization errors when using a shared resource, allowing a malicious actor to cause a service failure.

The vulnerability of the 389 Directory Server catalog service server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the 389 Directory Server, a catalog service server, related to uncontrolled resource consumption, allows attackers to cause system failures.

The vulnerability of the 389 Directory Server catalog service server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a malfunction in the server’s operation due to the ldapsearch sorting on the server si...

The vulnerability of the log__error_emergency() function in the 389 Directory Server server allows a attacker to trigger a service failure.

The vulnerability of the logerroremergency function in the 389 Directory Server server exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Directory Server (Tivoli) & Rational Directory Administrator.

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 and Version 8 used by Rational Directory Server Tivoli and Rational Directory Administrator. These issues were disclosed as part of the IBM Java SDK updates in April 2020. Upgrade the JRE in order to resolve...

NTT Communications Data Breach Affects Customers, Threatens Supply Chain

Japan-based systems integrator NTT Communications has disclosed a recent data breach that it said impacted hundreds of customers. The total affected comes to as many as 621 customers, the company said, but security experts worry about the impacts of the data breach due to the company’s positionin...

CVE-2020-9523

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running t...

Design/Logic Flaw

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running t...

Arbitrary Code Execution

redhat-ds-base is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Red Hat Directory Server handled simple paged result searches. If an unauthenticated user were able to send multiple simple paged search requests to Directory Server, it could cause t...

Privilege Escalation

redhat directory server is vulnerable to privilege escalation. It was found that multiple scripts shipped with Red Hat Directory Server set the LDLIBRARYPATH environment variable to an insecure value containing an empty path. A local user able to trick a user running those scripts usually the roo...

Denial Of Service (DoS)

redhat-ds-base is vulnerable to denial of service DoS. The vulnerability exists when multiple Red Hat Directory Server instances were configured on the system to run under different unprivileged users, the Directory Server setup scripts set insecure permissions on the /var/run/dirsrv/ directory,...

Information Disclosure

directory server is vulnerable to information disclosure. Directory Server setup scripts created cache files, containing passwords for the Directory and Administration Server administrative accounts, with weak file permissions. A local user could use this flaw to obtain authentication credentials...

Denial Of Service (DoS)

Red Hat Directory Server is vulnerable to Denial Of Service DoS. Ulf Weltman of Hewlett Packard discovered a flaw in the way Directory Server handled LDAP search requests with patterns. A remote attacker with access to the LDAP service could create a search request that, when the search pattern w...

Denial Of Service (DoS)

Red Hat Directory Server is vulnerable to Denial Of Service DoS. An unauthenticated remote attacker could use these flaws to trigger high memory consumption in the Directory Server, possibly causing it to crash or terminate unexpectedly when running out of available memory...

Cross-site Scripting (XSS)

adminutil is vulnerable to cross-site scripting XSS. The vulnerability exists as the Directory Server Administration Express web interface incorrectly parsed %-escaped user provided values. A remote attacker could use this flaw to conduct cross-site scripting attacks against directory server...

Privilege Escalation

redhat-ds-admin is vulnerable to privilege escalation. The vulnerability exists as it was discovered that the Red Hat Administration Server did to properly restrict access to CGI scripts. An unauthenticated remote user with access to the TCP port used by the Administration Server could access...

Arbitrary Code Execution

redhat-idm-console is vulnerable to arbitrary code execution. When running on Red Hat Enterprise Linux, Red Hat Directory Server 8.0 used insecure permissions on the redhat-idm-console startup script. Local users could modify this script and run arbitrary code with the privileges of the user...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Directory Server (Tivoli) & Rational Directory Administrator

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 and Version 8 used by Rational Directory Server Tivoli and Rational Directory Administrator. These issues were disclosed as part of the IBM Java SDK updates in March 2020. Upgrade the JRE in order to resolve...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Directory Server (Tivoli) & Rational Directory Administrator

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 and Version 8 used by Rational Directory Server Tivoli and Rational Directory Administrator. These issues were disclosed as part of the IBM Java SDK updates in January 2020. Upgrade the JRE in order to resolve...

The vulnerability of the 389 Directory Server server arises from reading beyond the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability of the 389 Directory Server catalog service server arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Directory Server ISDS. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in security bulletins. Vulnerability Details Refer to the security bulletinss listed in the...