2115 matches found
Important: slapi-nis
Issue Overview: A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability. CVE-2021-3480 Affected Packages:...
Weak password vulnerability in DS-SAG200 of Hangzhou Hikvision System Technology Co.
Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the DS-SAG200 of Hangzhou Hikvision System Technology Co. that can be exploited by attackers to obtain sensitive information...
openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:0868-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CentOS 7 : 389-ds-base (RHSA-2021:2323)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2323 advisory. - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an...
Security update for 389-ds (moderate)
openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2021:0868-1 Rating: moderate References: 1185356 Cross-References: CVE-2021-3514 CVSS scores: CVE-2021-3514 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update that...
openSUSE Security Update : 389-ds (openSUSE-2021-868)
This update for 389-ds fixes the following issues : - CVE-2021-3514: Fixed a syncrepl NULL pointer dereference in synccreatestatecontrol bsc1185356 389-ds was updated to version 1.4.3.23git0.f53d0132b : Bump version to 1.4.3.23 : - Issue 4725 - RFE DS - Update the password policy to support a...
OPENSUSE-SU-2021:0868-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2021-3514: Fixed a syncrepl NULL pointer dereference in synccreatestatecontrol bsc1185356 389-ds was updated to version 1.4.3.23git0.f53d0132b: Bump version to 1.4.3.23: Issue 4725 - RFE DS - Update the password policy to support a Temporar...
Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:2323)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2323-1 advisory. - 389-ds-base: information disclosure during the binding of a DN CVE-2020-35518 Note that Nessus has not tested for this issue but has instead relied only...
SUSE SLES15 Security Update : 389-ds (SUSE-SU-2021:1878-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:1878-1 advisory. - CVE-2021-3514: Fixed a syncrepl NULL pointer dereference in synccreatestatecontrol bsc1185356 389-ds was updated to version 1.4.3.23git0.f53d0132b:...
Oracle Linux 7 : 389-ds-base (ELSA-2021-2323)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2323 advisory. 1.3.10.2-12 - Bump version to 1.3.10.2-12 1.3.10.2-11 - Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work...
SUSE: Security Advisory (SUSE-SU-2019:1207-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
389-ds-base security and bug fix update
1.3.10.2-12 - Bump version to 1.3.10.2-12 1.3.10.2-11 - Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN...
SUSE: Security Advisory (SUSE-SU-2019:1207-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : 389-ds-base (RHSA-2021:2323)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2323 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server an...
SUSE-SU-2021:1878-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2021-3514: Fixed a syncrepl NULL pointer dereference in synccreatestatecontrol bsc1185356 389-ds was updated to version 1.4.3.23git0.f53d0132b: Bump version to 1.4.3.23: Issue 4725 - RFE DS - Update the password policy to support a Temporar...
Important: Red Hat Security Advisory: pki-core:10.6 security update
An update for the pki-core:10.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: pki-core:10.6 security update
The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: pki-server: Dogtag installer "pkispawn" logs admin credentials into a world-readable log file CVE-2021-3551 The PKI installer "pkispawn" logs admin credentials into a...
CVE-2021-3514
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
