IBM Lotus Domino LDAP - Bind Request Remote Code Execution

!/usr/bin/perl Source: http://www.protekresearchlab.com/index.php?option=comcontent&view=article&id=23&Itemid=23 use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '192.168.100.66'; my $port = 389; my $proto = 'tcp'; my $sockType = SOCKSTREAM; my $timeout = 1; if defined $opth usage my...

ZDI-11-047: IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability

ZDI-11-047: IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-047 February 7, 2011 - This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 180 day deadline. To view mitigations for this...

Buffer overflow

Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX...

CVE-2011-0917

Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX...

CVE-2011-0917

IBM Lotus Domino LDAP Bind Request vulnerability (CVE-2011-0917) stems from a buffer overflow in nLDAP.exe when handling a long string in LDAP Bind operations, enabling remote code execution over the LDAP port (389). The issue is documented across multiple advisories (e.g., ZDI-11-047, OpenVAS, a...

CVE-2011-0917: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX...

PT-2011-2760

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino affected versions not specified Description The issue is related to a buffer overflow in the nLDAP.exe component of IBM Lotus Domino, which allows remote attackers to execute arbitrary code via a long string in an LDAP Bind...

CVE-2007-6714

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication...

Buffer overflow

Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind...

CVE-2006-6493

Buffer overflow in the krbv4ldapauth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind Kerberos KBIND option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAPAUTHKRBV41 authentication meth...

CVE-2006-5779: Reachable Assertion

OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service daemon crash via LDAP BIND requests with long authcid names, which triggers an assertion failure...

CVE-1999-0385

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands...

CVE-1999-0385: Buffer Copy without Checking Size of Input

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands...

CVE-1999-0385

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands...