Linux Distros Unpatched Vulnerability : CVE-2016-5416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7...

Linux Distros Unpatched Vulnerability : CVE-2022-0996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication. CVE-2022-0996 Note...

Linux Distros Unpatched Vulnerability : CVE-2022-0918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of...

SUSE-SU-2025:02896-1 Security update for 389-ds

This update for 389-ds fixes the following issues: Update to version 2.0.20git64.628a24b68: Security fixes: - CVE-2025-3416: Fixed openssl use after free bsc1242666 Other fixes: - resolve infinite loop due when loading RUV entryrdn bsc1243428 Upstream changelog: Issue 6119 - Synchronise...

Security Bulletin: A Security Vulnerability was found in the IBM Security Verify Access product.

Summary IBM Security Verify Access could allow could an unverified user to change the password of an expired user without prior knowledge of that password Vulnerability Details CVEID:CVE-2024-45647 DESCRIPTION: IBM Security Verify Access could allow could an unverified user to change the password...

RLSA-2025:4491 Moderate: 389-ds-base security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: null pointer dereference leads to denial of service CVE-2025-2487 F...

389-ds-base security update

An update is available for 389-ds-base. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The ba...

Astra Linux – Vulnerability in the 389-DS-base

A denial-of-service vulnerability was discovered in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service when attempting to log in using a user with a malformed hash in their password...

CVE-2023-25495

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured...

CVE-2022-33165

IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 228582...

CVE-2022-33161

IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID:...

CVE-2010-4789

Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.65 aka 6.0.0.8-TIV-ITDS-IF0007 and 6.3 before 6.3.0.1 aka 6.3.0.0-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service daemon crash via a paged search that...

CVE-2010-4217

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server TDS 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service daemon crash via an unbind request that occurs during a certain search operation...

CVE-2011-1822

The LDAPADD implementation in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log...

CVE-2011-1821

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service daemon hang via a cn=changelog search...

CVE-2011-2758

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...

CVE-2010-4787

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon hang via a paged search that triggers improper mutex processing...

CVE-2010-4788

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service daemon crash via a paged search...

CVE-2010-4786

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon crash or hang via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration...

CVE-2010-4785

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.0 before 6.0.0.62 aka 6.0.0.8-TIV-ITDS-IF0004 on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service ABEND via a malformed LDAP extended operation that triggers certain comparisons...