ds-mcp (>=1.0.9 <=1.0.11) potentially affected by CVE-2022-32213 via llhttp (=1.0.1)

llhttp NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on llhttp and may be impacted: - ds-mcp =1.0.9, =1.0.11 Source cves: CVE-2022-32213 Source advisory: OSV:GHSA-5689-V88G-G6RV...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:2295-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2295-1 advisory. - A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send ...

openSUSE: Security Advisory for 389-ds (SUSE-SU-2022:2295-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2295-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2021-4091: Fixed double free in psearch bsc1195324. - CVE-2022-1949: Fixed full access control bypass with simple crafted query bsc1199889...

389-ds-base security, bug fix, and enhancement update

1.3.10.2-16 - Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2022:5239)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5239-1 advisory. - 389-ds-base: sending crafted message could result in DoS CVE-2022-0918 - 389-ds-base: expired password was still allowed to access the database...

RHEL 7 : 389-ds-base (RHSA-2022:5239)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5239 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Mageia: Security Advisory (MGASA-2022-0239)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated 389-ds-base packages fix security vulnerability

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows...

SUSE-SU-2022:2163-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2022-1949: Fixed full access control bypass with simple crafted query bsc1199889. - CVE-2022-0918: Fixed denial of service issue via crafted messages bsc1197275. - CVE-2022-0996: Fixed mishandling of password expiry bsc1197345. -...

Malicious code in ds-club (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44f9dea4ed6016cde03b25471b9ab770cef7542d51a2b60594a84eae9c99d0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:2109-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2109-1 advisory. - A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead ...

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2022-1881)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:2105-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2105-1 advisory. - A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send ...

Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2022-1881)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2105-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2021-4091: Fixed double free in psearch bsc1195324. - CVE-2022-1949: Fixed full access control bypass with simple crafted query bsc1199889...

citroen-ds-manufaktur.com Cross Site Scripting vulnerability OBB-2652484

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

openSUSE: Security Advisory for 389-ds (SUSE-SU-2022:2081-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:2081-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2081-1 advisory. - A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send ...

Denial Of Service (DoS)

389-ds-base is vulnerable to denial of service attacks. The vulnerability exists due to a lack of verification of authentication. This could allow an attacker to crash the system by a single message sent over a TCP connection leading to the unavailability of the system...