Lucene search
+L

24 matches found

Veracode
Veracode
added 2021/11/30 4:39 a.m.18 views

Regular Expression Denial Of Service (ReDoS)

python-ldap is vulnerable to regular expression denial of service attacks. The vulnerability exists in ldap.schema package which allows an attacker to parse malicious strings to LDAP schema which causes a ReDoS attack...

5.3AI score
SaveExploits0
OSV
OSV
added 2021/11/29 5:58 p.m.21 views

GHSA-R8WQ-QRXC-HMCM ReDoS in LDAP schema parser

https://github.com/python-ldap/python-ldap/issues/424 Impact The LDAP schema parser of python-ldap 3.3.1 and earlier are vulnerable to a regular expression denial-of-service attack. The issue affects clients that use ldap.schema package to parse LDAP schema definitions from an untrusted source...

6.5CVSS6.2AI score0.01897EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/11/29 12:00 a.m.6 views

PT-2021-24339

Name of the Vulnerable Software and Affected Versions: python-ldap versions prior to 3.4.0 Description: The issue is related to a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...

6.5CVSS6.7AI score0.01897EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
added 2004/09/03 12:00 a.m.26 views

Fedora Core 1 : samba-3.0.6-2.FC1 (2004-284)

Wed Aug 25 2004 Jay Fenlason 3.0.6-1.FC2 - Upgrade to 3.0.6 include the following patches: samba-3.0.5rc1-passwd.patch from me. This changes the character used in the password field of the entries generated by winbind from a 'x' to a ''. 'x' means something special 'password is in /etc/shadow' to...

5.6AI score
SaveExploits0References2
Rows per page
Query Builder