MGASA-2015-0143 Updated openldap packages fix CVE-2015-1545

Updated openldap packages fix security vulnerability: The deref overlay in slapd 2.4.13 through 2.4.40 dereferences a NULL pointer when a search request includes the Deref control with an empty list of attributes to return missing input validation. This allows a remote unauthenticated client to...

CVE-2015-0117: Undefined Security Weakness

The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, aka SPR KLYH9SLRGM...

CVE-2015-0117

The CVE-2015-0117 issue affects IBM Domino LDAP Server. A stack buffer overflow arises from insufficient validation when processing a crafted LDAP ModifyRequest, copying data into a fixed-length stack buffer. This allows a remote, unauthenticated attacker to cause memory corruption and potentiall...

PT-2015-1058

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x through 8.5.3 FP6 IF5 and 9.x through 9.0.1 FP3 IF0 Description The issue is related to memory corruption errors in IBM Domino, specifically in the LDAP Server component. This can be exploited by remote attackers to...

RedHat Update for 389-ds-base RHSA-2015:0416-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Updated 389-ds-base packages that fix one security issue, two bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

ldapsearch notes

I seem to find open LDAP servers on the Internet more often than I should. Here are some notes on using ldapsearch Installing ldapsearch on Ubuntu 1 | apt-get install ldap-utils ---|--- Root-DSE object nmap includes a script to gather info from a LDAP root-dse object . We can also use ldapsearch ...

Gnupg2 'dirmngr/ldapserver.c' Double Free Denial of Service Vulnerability

GnuPG is a Python module that allows, from a Python program, to conveniently use the key management, encryption and signing features of GnuPG. A denial of service vulnerability exists in Gnupg2 'dirmngr/ldapserver.c', which can be exploited by an attacker to launch a denial of service attack...

CentOS 6 : 389-ds-base (CESA-2013:1752)

Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CVE-2014-0074

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty 1 username or 2 password...

CVE-2014-0074

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty 1 username or 2 password...

CVE-2014-0074: Improper Authentication

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty 1 username or 2 password...

CommuniGate Systems CommuniGate Pro LDAP Server Buffer Overflow

There exists a buffer overflow vulnerability in CommuniGate Systems CommuniGate Pro LDAP server. The flaw is caused by improper validation of the user supplied LDAP message. An attacker may exploit this vulnerability to cause a denial of service condition of the affected server...

CentOS Update for 389-ds-base CESA-2014:1031 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

389 security update

CentOS Errata and Security Advisory CESA-2014:1031 Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base...

Microsoft Active Directory LDAP Server Username Enumeration Weakness

No description provided by source. source: http://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid...

IBM iSeries AS400 LDAP Server Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12991/info A remote information disclosure issue affects IBM iSeries AS400 LDAP Server. This issue is due to a failure of the application to properly secure sensitive information. An authenticated attacker may leverage th...

Intel Corporation Shiva Access Manager 5.0 Solaris World Readable LDAP Password

No description provided by source. source: http://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows NT. Shiva Access Manager is vulnerable to a...

openSUSE Security Update : openldap2 (openSUSE-SU-2011:0359-1)

Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password CVE-2011-1024. unauthenticated users could crash the ldap server CVE-2011-1081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

RedHat Update for 389-ds-base RHSA-2013:1119-01

Check for the Version of 389-ds-base OpenVAS Vulnerability Test RedHat Update for 389-ds-base RHSA-2013:1119-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...