6 matches found
EUVD-2014-0019
Malware in sbrugna...
Cross site scripting
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the 1 ipaNTTrustAuthIncoming and 2 ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors...
PYSEC-2014-103
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the 1 ipaNTTrustAuthIncoming and 2 ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors...
CVE-2013-0199
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the 1 ipaNTTrustAuthIncoming and 2 ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors...
CVE-2013-0199: Undefined Security Weakness
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the 1 ipaNTTrustAuthIncoming and 2 ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors...
PT-2014-2433
Name of the Vulnerable Software and Affected Versions FreeIPA versions 3.0 through 3.1.2 Description The default LDAP ACIs in FreeIPA do not restrict access to the ipaNTTrustAuthIncoming and ipaNTTrustAuthOutgoing attributes, allowing remote attackers to obtain the Cross-Realm Kerberos Trust key...