2331 matches found
RedHat Update for 389-ds-base RHSA-2016:0204-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : 389-ds-base (RHSA-2016:0204)
Updated 389-ds-base packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
389-ds-base: worker threads do not detect abnormally closed connections causing DoS
An infinite-loop vulnerability was discovered in the 389 directory server, where the server failed to correctly handle unexpectedly closed client connections. A remote attacker able to connect to the server could use this flaw to make the directory server consume an excessive amount of CPU and st...
Red Hat 389 Directory Server Denial of Service Vulnerability
Red Hat 389 Directory Server is an enterprise-class Linux directory server. A security vulnerability in Red Hat 389 Directory Server allows attackers to conduct denial-of-service attacks by exploiting the vulnerability...
libldb: remote memory read in the Samba LDAP server
A memory-read flaw was found in the way the libldb library processed LDB DN records with a null byte. An authenticated, remote attacker could use this flaw to read heap-memory pages from the server...
Security fix for the ALT Linux 7 package samba version 4.3.3-alt1
Dec. 16, 2015 Andrey Cherepanov 4.3.3-alt1 - New version https://www.samba.org/samba/history/samba-4.3.3.html - Security fixes: - CVE-2015-3223 Denial of service in Samba Active Directory server - CVE-2015-5252 Insufficient symlink verification in smbd - CVE-2015-5299 Missing access control check...
389 Directory Server nsSSL3Ciphers Preference Vulnerability
389 Directory Server is an LDAP server developed by Red Hat. A preference vulnerability exists in 389 Directory Server nsSSL3Ciphers, which could allow a remote attacker to perform a security attack by requesting the use of a disabled cipherset...
CVE-2015-3230
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
UBUNTU-CVE-2015-3230
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
CVE-2015-3230
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
CVE-2015-3230
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
DEBIAN-CVE-2015-3230
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
CVE-2015-3230
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
CVE-2015-3230
The CVE targets 389-ds-base (389 Directory Server) prior to version 1.3.3.12, where the nsSSL3Ciphers preference is not enforced when creating an sslSocket. This allows a remote attacker to request a disabled cipher, with impact described as unspecified in the sources. Public advisories confirm a...
CVE-2015-3230
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
[SECURITY] Fedora 21 Update: 389-ds-base-1.3.3.13-1.fc21
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
Amazon Linux: Security Advisory (ALAS-2013-255)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
389-ds-base: nsSSL3Ciphers preference not enforced server side (regression)
389 Directory Server formerly Fedora Directory Server before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher...
IBM Tivoli Security Directory Server Information Disclosure Vulnerability (CNVD-2015-04103)
IBM Tivoli Security Directory Server now known as IBM Security Directory Server, ISDS is a suite of enterprise identity management software from IBM in the United States that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for...
IBM Tivoli Security Directory Server Information Disclosure Vulnerability (CNVD-2015-04102)
IBM Tivoli Security Directory Server now known as IBM Security Directory Server, ISDS is a suite of enterprise identity management software from IBM in the United States that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for...