CVE-2013-5163

Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors...

Design/Logic Flaw

Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors...

CVE-2013-5163

Apple Mac OS X: CVE-2013-5163 describes a vulnerability in Directory Services prior to OS X 10.8.5 Supplemental Update that allows a local user to bypass password validation and modify Directory Services records via unspecified vectors. The issue stems from a logic/credential verification flaw an...

CVE-2013-5163

Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors...

Mac OS X 10.8 < 10.8.5 Supplemental Update

The remote host is running a version of Mac OS X 10.8 that is missing the OS X v10.8.5 Supplemental Update. This update fixes a logic issue in verification of authentication credentials by Directory Services, which could otherwise allow a local attacker to bypass password validation. TRUSTED...

PT-2013-4701 · Microsoft · Windows Server 2012 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Active Directory Lightweight Directory Service AD LDS versions on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 Active Directory Services versions on Windows Server 2008 SP2 and R2 SP1 and Serve...

Microsoft .NET Framework Privilege Elevation Vulnerability (2769324)

This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-004.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2769324 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...

Barracuda Email Security Service - Multiple HTML Injection Vulnerabilities

Barracuda Email Security Service - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/54773/info Barracuda Email Security Service is prone to multiple HTML-injection vulnerabilities because it fails to properly validate user-supplied input. An attacker may leverage...

[SECURITY] Fedora 17 Update: openldap-2.4.31-3.fc17

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Novell Messenger Server < 2.2.1 Memory Information Disclosure

Binary data 6057.prm...

Apple Mac OSX (Lion) - Directory Services Security Bypass

Apple Mac OSX Lion - Directory Services Security Bypass source: https://www.securityfocus.com/bid/49676/info Apple Mac OS X Lion is prone to multiple security-bypass vulnerabilities. Local attackers can exploit these issues to obtain sensitive information or change the password of other users on...

IBM Domino Installed

IBM Domino formerly IBM Lotus Domino, an enterprise application for collaborative messaging, scheduling, directory services, and web services, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55818; scriptversion"1.8";...

[SECURITY] Fedora 15 Update: openldap-2.4.24-2.fc15

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Apple Directory Services Memory Corruption - CVE-2010-1840

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Apple Directory Services Memory Corruption CVE-2010-1840 INTRODUCTION...

CVE-2010-1838

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name...

CVE-2010-1840

Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Authentication flaw

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name...

CVE-2010-1838

CVE-2010-1838 affects Apple Mac OS X Directory Services: a data/error-handling flaw in disabled mobile account processing can allow a local attacker to bypass password validation and log in with a valid account name on Mac OS X 10.5.8 and 10.6.x up to but not including 10.6.5. The issue is addres...

CVE-2010-1840

CVE-2010-1840 describes a stack-based buffer overflow in Directory Services password validation on Apple Mac OS X 10.5.8 and 10.6.x prior to 10.6.5. Connected sources specify that chfn/chsh/chpass handling of long strings can crash or allow arbitrary code execution via remotely crafted input, wit...

CVE-2010-1838

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name...