2324 matches found
Critical: Red Hat Security Advisory: redhat-ds-admin security update
An updated redhat-ds-admin package that fixes security issues is now available for Red Hat Directory Server 8.0. This update has been rated as having critical security impact by the Red Hat Security Response Team. Red Hat Administration Server is an HTTP agent that provides management features fo...
Important: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 5 security update
An updated redhat-ds package that addresses a security issue is now available as Red Hat Directory Server 7.1, Service Pack 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server. A...
Server: unrestricted access to CGI scripts
Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions...
Code injection
Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...
PT-2008-2504 · Red Hat · Red Hat Directory Server
Name of the Vulnerable Software and Affected Versions: Red Hat Directory Server version 8.0 Description: The issue is related to insecure permissions for the redhat-idm-console script. This allows local users to execute arbitrary code by modifying the script. Recommendations: For Red Hat Director...
CVE-2008-0889
Affected product/versions: Red Hat Directory Server 8.0 running on Red Hat Enterprise Linux. Vulnerable component: the startup script for the redhat-idm-console. Root cause: insecure permissions on the redhat-idm-console script allow local users to modify it and execute arbitrary code. Impact: lo...
CVE-2008-0889
Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script...
Important: Red Hat Security Advisory: redhat-idm-console security update
Updated redhat-idm-console packages that fix a security issue are now available for Red Hat Directory Server 8.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The redhat-idm-console contains a Java based remote management console used for...
CVE-2008-0890
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors...
Code injection
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors...
CVE-2008-0890
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors...
CVE-2008-0890
CVE-2008-0890 affects Red Hat Directory Server 7.1 prior to SP4. The issue is insecure permissions on certain directories that allow a local user to replace Java ARchive (JAR) files and execute arbitrary code with the server’s privileges. The official Red Hat advisory RHSA-2008:0173 documents the...
7.1: insecure default permissions on jars directory
Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors...
Important: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 4 security update
Red Hat Directory Server 7.1 Service Pack 4: an updated redhat-ds package that fixes a security issue and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3 compliant server. It...
Solaris 5.9 (sparc) : 125276-08
Directory Server Enterprise Edition 6.3.1 : SunOS 5.9/5.10 Sparc N. Date this patch was last updated by Sun : Feb/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/12/27. C Tenable Network...
Solaris 5.9 (x86) : 125277-08
Directory Server Enterprise Edition 6.3.1 : SunOS 5.9x86 Native P. Date this patch was last updated by Sun : Feb/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
CVE-2007-3224
Unspecified vulnerability in Sun ONE/Java System Directory Server slapd 6.0, and 5.x before 5.2 Patch 5, allows remote attackers to determine the existence of attributes of an entry via unspecified vectors...
Code injection
Unspecified vulnerability in Sun Java System Directory Server slapd 6.0, and 5.2 with Patch 3 or 4, allows remote attackers to modify certain data via unknown vectors...
Code injection
Unspecified vulnerability in Sun ONE/Java System Directory Server slapd 6.0, and 5.x before 5.2 Patch 5, allows remote attackers to determine the existence of attributes of an entry via unspecified vectors...