Oracle Linux 6 : 389-ds-base (ELSA-2014-0292)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0292 advisory. 1.2.11.15-32 - Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation rhel-6.5.z Ticket...

CentOS 6 : 389-ds-base (CESA-2014:0292)

Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20140313)

It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager account. This...

PT-2014-1864 · Red Hat +1 · 389-Ds-Base +2

Name of the Vulnerable Software and Affected Versions: 389-ds-base versions 1.2.11.15 through 1.2.11.25 Description: The issue allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind. This can lead to a violation of...

389-ds-base security update

1.2.11.15-32 - Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation rhel-6.5.z Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind...

CVE-2013-4977

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 Jan 2013, and possibly other devices, allows remote attackers to cause a denial of service device crash and reboot and possibly execute arbitrary code via a long string in the Range header...

CVE-2013-4977

CVE-2013-4977 is a confirmed buffer overflow in the RTSP Packet Handler of Hikvision DS-2CD7153-E (firmware 4.1.0 b130111, Jan 2013) that allows remote attackers to crash the device and potentially execute code via a crafted Range header in RTSP. Public sources describe the vulnerability as affec...

CVE-2013-4977: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 Jan 2013, and possibly other devices, allows remote attackers to cause a denial of service device crash and reboot and possibly execute arbitrary code via a long string in the Range header...

PT-2014-2884

Name of the Vulnerable Software and Affected Versions Hikvision DS-2CD7153-E IP camera version 4.1.0 b130111 Description The issue is related to a buffer overflow in the RTSP Packet Handler, which can be triggered by a long string in the Range header field in an RTSP transaction. This can cause a...

Fedora Update for 389-ds-base FEDORA-2013-21875

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : 389-ds-base-1.3.0.9-1.fc18 (2013-21875)

Each release has bug fixes in addition to the CVE fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for 389-ds-base FEDORA-2013-22012

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : 389-ds-base-1.3.1.16-1.fc19 (2013-22012)

Fixes Ticket 47599 - Reduce lock scope in retro changelog plug-in - previous fix missing defition of retroclcnlock Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Updated 389-ds-base package fixes CVE-2013-4485

Updated 389-ds-base packages fix security vulnerability: It was discovered that the 389 Directory Server did not properly handle certain Get Effective Rights GER search queries when the attribute list, which is a part of the query, included several names using the '@' character. An attacker able ...

Symantec SQL injection exp-vulnerability warning-the black bar safety net

the msf under exp attack examples: msf use exploit/windows/misc/altirisdssqli msf Trojanaltirisdssqli show targets msf Trojanaltirisdssqli set TARGET target-id msf Trojanaltirisdssqli show options msf Trojanaltirisdssqli exploit exp attack code is as follows: This file is part of the Metasploit...

Oracle Linux 6 : 389-ds-base (ELSA-2013-1752)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1752 advisory. - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-sla...

389 security update

CentOS Errata and Security Advisory CESA-2013:1752 Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS ba...

Fedora 20 : 389-ds-base-1.3.2.7-1.fc20 (2013-22139)

Updated plugin API Here is where you give an explanation of your update. There are additional fixes on top of the CVE Fixes Ticket 47599 - Reduce lock scope in retro changelog plug-in - previous fix missing defition of retroclcnlock Note that Tenable Network Security has extracted the preceding...

389-ds-base security update

1.2.11.15-30 - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches 1.2.11.15-29 - Bump version to 1.2.11.15-29 - Resolves: bug 1008013: DS91: ns-slapd stuck in DSSleep 1.2.11.15-28 - Bump version to 1.2.11.15-28 - Resolves: Bug 1016038 - Users from A...

RedHat Update for 389-ds-base RHSA-2013:1752-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...