Critical: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 7 security update

An updated redhat-ds package that fixes various security issues is now available as Red Hat Directory Server 7.1, Service Pack 7. This update has been rated as having critical security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server...

Server: multiple XSS issues

Multiple cross-site scripting XSS vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway DSGW web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject...

Server: temporary DoS via crafted pattern searches

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service CPU consumption and search outage via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem...

Moderate: Red Hat Security Advisory: redhat-ds-base and redhat-ds-admin security and bug fix update

Updated redhat-ds-base and redhat-ds-admin packages are now available that fix security issues and various bugs. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server. Multiple memory...

Server: temporary DoS via crafted pattern searches

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service CPU consumption and search outage via crafted LDAP search requests with patterns, related to a single-threaded regular-expression subsystem...

Moderate: Red Hat Security Advisory: adminutil security update

An updated adminutil package that fixes a security issue is now available for Red Hat Directory Server 8.0. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant server. The adminutil packages is...

Server: multiple XSS issues

Multiple cross-site scripting XSS vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway DSGW web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject...

RedHat 8/9 - Directory Server Crafted Search Pattern Denial of Service

source: https://www.securityfocus.com/bid/30871/info Red Hat Directory Server is prone to a denial-of-service vulnerability because the server fails to handle specially crafted search patterns. An attacker can exploit this issue to consume CPU resources with one search request, effectively blocki...

RedHat 89 - Directory Server Crafted Search Pattern Denial of Service

RedHat 89 - Directory Server Crafted Search Pattern Denial of Service source: https://www.securityfocus.com/bid/30871/info Red Hat Directory Server is prone to a denial-of-service vulnerability because the server fails to handle specially crafted search patterns. An attacker can exploit this issu...

RHEL 4 : nss_ldap (RHSA-2008:0715)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

IBM Tivoli目录服务器添加ibm-globalAdminGroup项拒绝服务漏洞

BUGTRAQ ID: 30013 IBM Tivoli目录服务器提供了一个功能强大的轻量级目录访问协议（LDAP）身份基础架构，它是部署全面的身份管理应用程序和类似于Web服务的高级软件体系结构的基础。 IBM Tivoli目录服务器在处理某些请求时存在双重释放错误。如果通过ldapadd添加了已有的ibm-globalAdminGroup项的话，就会导致服务器崩溃。这个漏洞不会构成实际的风险，因为仅有管理员才允许修改该项，而管理员不需要添加该项，服务器在启动时就会自动创建该项。 IBM Tivoli Directory Server 6.1.0.0 - 6.1.0.15 IBM --...

CVE-2008-2943

Double free vulnerability in IBM Tivoli Directory Server TDS 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service ABEND and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE:...

Double free

Double free vulnerability in IBM Tivoli Directory Server TDS 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service ABEND and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE:...

CVE-2008-2943

The CVE-2008-2943 entry concerns IBM Tivoli Directory Server (TDS) 6.1.0.0–6.1.0.15, where a double-free vulnerability can be triggered via LDAP operations. The underlying issue is a double-free in the LDAP processing path when attempting to create a duplicate ibm-globalAdminGroup entry, which re...

CVE-2008-2943

Double free vulnerability in IBM Tivoli Directory Server TDS 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service ABEND and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE:...

IBM Tivoli Directory Server 6.1.x - Adding ibm-globalAdminGroup Entry Denial of Service

IBM Tivoli Directory Server 6.1.x - Adding ibm-globalAdminGroup Entry Denial of Service source: https://www.securityfocus.com/bid/30010/info IBM Tivoli Directory Server is prone to a denial-of-service vulnerability because the server contains a double-free error. An attacker can exploit this issu...

IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service

source: https://www.securityfocus.com/bid/30010/info IBM Tivoli Directory Server is prone to a denial-of-service vulnerability because the server contains a double-free error. An attacker can exploit this issue to crash the affected server with a SIGSEGV fault, denying service to legitimate users...

CVE-2008-2943: Undefined Security Weakness

Double free vulnerability in IBM Tivoli Directory Server TDS 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service ABEND and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE:...

Authentication flaw

Unspecified vulnerability in Sun Java System Access Manager AM 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition DSEE, allows remote attackers to bypass authentication via unspecified vectors...

CVE-2008-2705

Unspecified vulnerability in Sun Java System Access Manager AM 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition DSEE, allows remote attackers to bypass authentication via unspecified vectors...