ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability

ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-073 April 13, 2010 -- CVE ID: CVE-2010-0897 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Directory Server...

Oracle Java System Directory Server Multiple Remote Vulnerabilities

Oracle Java System Directory Server is prone to multiple remote vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Unspecified vulnerability in the Sun Java System Directory Server component in Oracle Sun Product Suite 5.2, 6.0, 6.1, 6.2, 6.3, and 6.3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Directory Service Markup Language...

CVE-2010-0897

CVE-2010-0897 affects Sun Microsystems Directory Server (Oracle Sun Product Suite). Connected sources describe multiple vulnerabilities in the DSML/DSML-over-HTTP and LDAP implementations. The flaws can enable denial of service via DSML-over-HTTP POST requests or malformed LDAP queries, and can a...

Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability

This vulnerability allows attackers to deny services on vulnerable installations of Sun Microsystems Directory Service Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's DSML-over-HTTP implementation and can be triggered v...

Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability

This vulnerability allows attackers to deny services on vulnerable installations of Sun Microsystems Directory Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's DSML-over-HTTP implementation and can be triggered via an HTT...

RedHat Update for openldap RHSA-2010:0198-04

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0198-04 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Sun Java System Directory Server LDAP Search Request DoS Vulnerability (Jan 2010)

Sun Java System Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Cross site request forgery (csrf)

Multiple unspecified vulnerabilities in 1 ns-slapd and 2 slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service daemon crash via a...

CVE-2010-0708

Multiple unspecified vulnerabilities in 1 ns-slapd and 2 slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service daemon crash via a...

CVE-2010-0708

CVE-2010-0708 affects Sun Directory Server family (Sun Directory Server Enterprise Edition 7.0; Sun Java System Directory Server 5.2; Sun Java System Directory Server Enterprise Edition 6.0–6.3.1). The issue is multiple unspecified vulnerabilities in LDAP search handling that allow remote attacke...

CVE-2010-0708

Multiple unspecified vulnerabilities in 1 ns-slapd and 2 slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service daemon crash via a...

Null pointer dereference

The coregetproxyauthdn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted LDAP Search Request message...

CVE-2010-0313

The coregetproxyauthdn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted LDAP Search Request message...

CVE-2010-0312

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.2 on Linux allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted SecureWay 3.2 Event Registration Request aka a 1.3.18.0.2.12.1 request...

CVE-2010-0313

CVE-2010-0313 affects Sun Java System Directory Server Enterprise Edition 7.0. The vulnerable component is the ns-slapd function core_get_proxyauth_dn, triggered by a crafted LDAP Search Request, which can cause a NULL pointer dereference and a daemon crash (DoS) without requiring authentication....

CVE-2010-0313

The coregetproxyauthdn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted LDAP Search Request message...

CVE-2010-0312

CVE-2010-0312 affects IBM Tivoli Directory Server 6.2 on Linux; the vulnerability is in the do_extendedOp function of ibmslapd, where a crafted SecureWay 3.2 Event Registration Request (1.3.18.0.2.12.1) can trigger a NULL pointer dereference and daemon crash, resulting in a denial of service. Red...

CVE-2010-0312

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.2 on Linux allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted SecureWay 3.2 Event Registration Request aka a 1.3.18.0.2.12.1 request...

Sun Java System Directory Server Detection (LDAP)

LDAP based detection of Sun Java System Directory Server. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...