2331 matches found
CVE-2015-1977
CVE-2015-1977 describes a directory traversal in IBM Tivoli Directory Server (ITDS) and IBM Security Directory Server (ISDS) Web Administration, allowing a remote attacker to read arbitrary files via a URL containing .. sequences. Affected versions: ITDS 6.1.0.73 and earlier; 6.2.0.49 and earlier...
Red Hat 389 Directory Server Information Disclosure Vulnerability (CNVD-2016-04980)
Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat. The server fully supports the LDAPv3 specification and features scalability, multi-master replication, and more. An information disclosure vulnerability exists in Red...
IBM Tivoli / Security Directory Server Remote Arbitrary File Viewing Vulnerability
IBM Security Directory Server ISDS, formerly IBM Tivoli Directory Server, ITDS is a suite of enterprise identity management software from IBM in the United States that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for...
The vulnerability of the WebSphere Application Server software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability in IBM GSKit for IBM Security Directory Server ISDS and Tivoli Directory Server TDS allows malicious actors to cause service failures—such as premature termination of applications or system hangs—by using improperly constructed X.509 certificate chains...
RedHat 389 Directory Server Denial of Service Vulnerability
389 Directory Server is an LDAP server developed by Red Hat. A denial of service vulnerability exists in RedHat 389 Directory Server versions 1.3.4.x 1.3.4.7, slapd/connection.c, which can be exploited by a remote attacker to cause a denial of service via an exceptionally closed connection...
CVE-2016-0741
slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...
DEBIAN-CVE-2016-0741
slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...
CVE-2016-0741
slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...
UBUNTU-CVE-2016-0741
slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...
Design/Logic Flaw
slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...
CVE-2016-0741
Summary: CVE-2016-0741 affects 389-ds-base (389 Directory Server) with a DoS by abnormally closed connections. The vulnerability occurs in slapd/connection.c across 1.3.4.x branches prior to 1.3.4.7, where worker threads fail to detect closed connections, enabling an infinite loop and connection ...
CVE-2016-0741
slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...
CVE-2016-0741
slapd/connection.c in 389 Directory Server formerly Fedora Directory Server 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service infinite loop and connection blocking by leveraging an abnormally closed connection...
IBM Tivoli Directory Server and Security Directory Server Command Execution Vulnerability
IBM Tivoli Directory Server is a suite of enterprise identity management software that uses the Lightweight Directory Access Protocol LDAP. A security vulnerability exists in the IBM Tivoli Directory Server and Security Directory Server web management tools. An attacker could exploit the...
Amazon Linux: Security Advisory (ALAS-2016-664)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: 389-ds-base
Issue Overview: An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amou...
[SECURITY] Fedora 23 Update: 389-ds-base-1.3.4.8-1.fc23
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
[SECURITY] Fedora 22 Update: 389-ds-base-1.3.4.8-1.fc22
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
Updated 389-ds-base packages fix security vulnerability
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and st...
Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20160216)
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and st...