574 matches found
CVE-2010-4682
Memory leak on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service memory consumption by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867...
CVE-2010-4029
Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...
Authentication flaw
Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...
CVE-2010-4029
HP Storage Essentials prior to 6.3.0 contains an LDAP authentication vulnerability (CVE-2010-4029) that can enable remote attackers to obtain sensitive information, modify data, or cause a denial of service. The issue is triggered when LDAP authentication is enabled and affects HP Storage Essenti...
CVE-2010-4029
Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...
SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 6535)
Multiple security vulnerabilities have been fixed in PostgrSQL - allows remote authenticated users to cause a denial of service. CVE-2009-3229 - allows remote authenticated users to gain higher privileges. CVE-2009-3230 - when using LDAP authentication with anonymous binds, allows remote attacker...
CVE-2010-2940
The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...
DEBIAN-CVE-2010-2940
The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...
CVE-2010-2940
CVE-2010-2940 affects System Security Services Daemon (SSSD) 1.3.0. When LDAP authentication with anonymous bind is enabled, the auth_send function in providers/ldap/ldap_auth.c allows remote attackers to bypass pam_authenticate by supplying an empty password. The vulnerability enables partial co...
Authentication flaw
Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password...
CVE-2010-1596
Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password...
CVE-2010-1596
CVE-2010-1596 affects Support Incident Tracker (SiT!) prior to version 3.51. When LDAP authentication uses anonymous binds, remote attackers can bypass authentication by supplying an empty password. Exploitation details are supported by multiple sources in the connected docs, including OpenVAS an...
Mandriva Update for drakxtools MDVA-2010:082 (drakxtools)
Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:082 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
MDVA-2010:082 : drakxtools
When LDAP authentication is configured using the drakauth application, it could result in several bogus error messages related to '/var/lib/misc/group.db: file not found'. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...
Debian DSA-1900-1 : postgresql-7.4, postgresql-8.1, postgresql-8.3, postgresql-8.4 - several vulnerabilities
Several vulnerabilities have been discovered in PostgreSQL, a SQL database system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3229 Authenticated users can shut down the backend server by re-LOAD-ing libraries in $libdir/plugins, if any librarie...
ldap-brute NSE Script
Attempts to brute-force LDAP authentication. By default it uses the built-in username and password lists. In order to use your own lists use the userdb and passdb script arguments. This script does not make any attempt to prevent account lockout! If the number of passwords in the dictionary excee...
Mandriva Security Advisory MDVSA-2009:251-1 (postgresql8.2)
The remote host is missing an update to postgresql8.2 announced via advisory MDVSA-2009:251-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only O...
openSUSE 10 Security Update : postgresql (postgresql-6502)
Multiple security vulnerabilities have been fixed in PostgrSQL - CVE-2009-3229: allows remote authenticated users to cause a denial of service - CVE-2009-3230: allows remote authenticated users to gain higher privileges - CVE-2009-3231: when using LDAP authentication with anonymous binds, allows...
Mandriva Linux Security Advisory : postgresql8.2 (MDVSA-2009:251-1)
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service backend shutdown by re-LOAD-ing libraries from a certain plugins directory CVE-2009-3229. The core server component in PostgreSQL 8.4...