GHSA-82MG-X548-GQ3J LDAP Injection in ldapauth

Versions 2.2.4 and earlier of ldapauth-fork are affected by an LDAP injection vulnerability. This allows an attacker to inject and run arbitrary LDAP commands via the username parameter. Recommendation ldapauth is not actively maintained, having not seen a publish since 2014. As a result, there i...

PT-2017-7186

Name of the Vulnerable Software and Affected Versions ldapauth-fork versions 2.2.4 and earlier Description The issue allows remote attackers to perform LDAP injection attacks via a crafted username. This enables an attacker to inject and run arbitrary LDAP commands. Recommendations For versions...

Design/Logic Flaw

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable to obtain sensitive information from the database...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

No description provided by source. Attackers use readily available LDAP commands to exploit this issue. The following command demonstrates this issue: ldapmodrdn -x -h :389 -D dn -w pw -e \noop ou=test,dc=my-domain,dc=com ou=test2...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ============================================================= OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability ============================================================= Title: OpenLDAP 2.3.39 MODRDN Remote Denial of Service...