CentOS Update for 389-ds-base CESA-2013:0742 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...

Low: 389-ds-base

Issue Overview: It was found that the 389 Directory Server did not properly restrict access to entries when the "nsslapd-allow-anonymous-access" configuration setting was set to "rootdse". An anonymous user could connect to the LDAP database and, if the search scope is set to BASE, obtain access ...

RHEL 6 : 389-ds-base (RHSA-2013:0742)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0742 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...

389-ds: unintended information exposure when rootdse is enabled

The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...

Fedora Update for 389-ds-base FEDORA-2013-4578

Check for the Version of 389-ds-base OpenVAS Vulnerability Test Fedora Update for 389-ds-base FEDORA-2013-4578 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[SECURITY] Fedora 18 Update: 389-ds-base-1.3.0.5-1.fc18

389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...

CVE-2013-0556: IBM Tivoli Directory Server SSL/TLS denial of service

The CVE-2013-0556 issue affects IBM Tivoli Directory Server. Connected data show that vulnerable versions are IBM Tivoli Directory Server 6.2.x prior to 6.2.0.29 and 6.3.x prior to 6.3.0.21. It describes a denial-of-service condition where a TLS/SSL connection can fail to time out while waiting f...

CVE-2013-0336

The ipapwdchpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipapwdextop.c in the directory server dirsrv in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service crash via a connection request without a username/dn, related to the 389 directory server...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

DEBIAN-CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

Design/Logic Flaw

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

CVE-2013-0312

CVE-2013-0312 affects 389-ds-base/389 Directory Server. Affected: 389-ds-base prior to 1.3.0.4. Root cause: processing of a zero-length LDAP control sequence can crash the LDAP server, leading to denial of service (partial availability). Public references in the connected docs confirm the vulnera...

CVE-2013-0312

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130311)

A flaw was found in the way LDAPv3 control data was handled by 389 Directory Server. If a malicious user were able to bind to the directory even anonymously and send an LDAP request containing crafted LDAPv3 control data, they could cause the server to crash, denying service to the directory...

389 security update

CentOS Errata and Security Advisory CESA-2013:0628 Updated 389-ds-base packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scori...

RedHat Update for 389-ds-base RHSA-2013:0628-01

Check for the Version of 389-ds-base OpenVAS Vulnerability Test RedHat Update for 389-ds-base RHSA-2013:0628-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for nss-pam-ldapd CESA-2013:0590 centos6

Check for the Version of nss-pam-ldapd OpenVAS Vulnerability Test CentOS Update for nss-pam-ldapd CESA-2013:0590 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

CentOS Update for 389-ds-base CESA-2013:0503 centos6

Check for the Version of 389-ds-base OpenVAS Vulnerability Test CentOS Update for 389-ds-base CESA-2013:0503 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...