Multiple Fedora Directory Server security vulnerabilities

Administration password is exposed through HTML page, DoS with LDAP...

[SA18939] Fedora Directory Server Admin Server Password Disclosure

TITLE: Fedora Directory Server Admin Server Password Disclosure SECUNIA ADVISORY ID: SA18939 VERIFY ADVISORY: http://secunia.com/advisories/18939/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From local network SOFTWARE: Fedora Directory Server 1.x...

[SA18960] Fedora Directory Server LDAP Denial of Service Vulnerabilities

TITLE: Fedora Directory Server LDAP Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA18960 VERIFY ADVISORY: http://secunia.com/advisories/18960/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Fedora Directory Server 1.x http://secunia.com/product/8160/ DESCRIPTION...

Multiple Stalker Communigate Pro / IBM Lotus Domino / Sun directory server / IBM Tivoli vulnerabilities

Multiple LDAP server vulnerabilities...

CVE-2006-0717

IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service crash via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite...

Design/Logic Flaw

IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service crash via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite...

CVE-2006-0717

IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service crash via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite...

CVE-2006-0717

IBM Tivoli Directory Server 6.0 is affected by CVE-2006-0717, where remote attackers can cause a denial of service (crash) by sending a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite. The available connected documents identify the affected product and ve...

CVE-2006-0717: Undefined Security Weakness

IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service crash via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite...

Design/Logic Flaw

The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service crash via a certain "bad BER sequence" that results in a free of uninitialized memory, as demonstrated using the ProtoVer LDAP test suite...

CVE-2006-0451

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service memory consumption via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the berscanf call, as demonstrate...

CVE-2006-0452

dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service CPU and memory consumption via a ModDN operation with a DN that contains a large number of "," comma characters, which results in a large amount of recursion, as demonstrated usin...

CVE-2006-0452

dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service CPU and memory consumption via a ModDN operation with a DN that contains a large number of "," comma characters, which results in a large amount of recursion, as demonstrated usin...

CVE-2006-0453

The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service crash via a certain "bad BER sequence" that results in a free of uninitialized memory, as demonstrated using the ProtoVer LDAP test suite...

CVE-2006-0453

The connected Red Hat advisory RHSA-2006:0270 documents CVE-2006-0453 as a remote DoS vulnerability in Red Hat Directory Server 7.1, caused by a flaw exposed via GLEG ProtoVer LDAP test suite that could crash the server by sending malformed LDAP requests. The issue is tied to the LDAP component a...

CVE-2006-0451

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service memory consumption via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the berscanf call, as demonstrate...

CVE-2006-0451

CVE-2006-0451 affects the LDAP component of Fedora Directory Server 1.0, where multiple memory leaks can cause a denial of service through memory consumption when processing invalid BER packets (triggered by the ProtoVer LDAP test suite). The issue is remote-executable and arises during ber_scanf...

CVE-2006-0452

CVE-2006-0452 affects the LDAP component of Fedora Directory Server 1.0, where a ModDN operation with a DN containing a large number of commas can trigger excessive recursion and cause a denial of service (CPU/memory). The vulnerability is exploited remotely by connecting to the directory server ...

CVE-2006-0453: Undefined Security Weakness

The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service crash via a certain "bad BER sequence" that results in a free of uninitialized memory, as demonstrated using the ProtoVer LDAP test suite...

IBM Tivoli Directory Server LDAP Packet Handling DoS

The remote host appears to be running IBM Tivoli Directory Server, an LDAP directory from IBM. The version of IBM Tivoli Directory Server fails to handle certain malformed search requests. A user can leverage this issue to crash the LDAP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...