PT-2007-1167 · Sun · Sun One Directory Server +1

Name of the Vulnerable Software and Affected Versions: Sun Java System Directory Server versions 5.2 Patch4 and earlier ONE Directory Server versions 5.1 and 5.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed queries to the...

OpenLDAP SASL authcid Name BIND Request DoS

The remote host appears to be running OpenLDAP, an open source LDAP directory implementation. The version of OpenLDAP installed on the remote host fails to handle malformed SASL bind requests. An unauthenticated attacker can leverage this issue to crash the LDAP server on the affected host...

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More informati...

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More...

Default credentials

The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed...

CVE-2006-2738

The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed...

CVE-2006-2738

The CVE-2006-2738 entry concerns the open source Open-Xchange 0.8.2 and earlier. It states that a static default username and password, with a valid login shell in the ldap-server initfile, enables remote attackers to access any server where the default has not been changed. Affected component: t...

Lotus Domino 7.0.x8.08.5 - LDAP Message Remote Denial of Service

Lotus Domino 7.0.x8.08.5 - LDAP Message Remote Denial of Service source: https://www.securityfocus.com/bid/17669/info Lotus Domino LDAP server is prone to a remote denial-of-service vulnerability when handling malformed requests. Lotus Domino 7.0 is vulnerable; earlier versions may also be...

'ldapsearch' Information Gathering (LDAP Protocol)

This plugins shows what information can be pulled of an LDAP server. SPDX-FileCopyrightText: 2006 Tarik El-Yassem/ITsec Security Services Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Lotus Domino LDAP Server Denial of Service Vulnerability

The remote LDAP server is affected by a denial of service vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SA18818] Isode M-Vault Server LDAP Vulnerability

TITLE: Isode M-Vault Server LDAP Vulnerability SECUNIA ADVISORY ID: SA18818 VERIFY ADVISORY: http://secunia.com/advisories/18818/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Isode M-Vault 11.x http://secunia.com/product/8065/ DESCRIPTION: Evgeny...

CVE-2005-2712

CVE-2005-2712 affects IBM Lotus Domino LDAP server (nldap.exe) before version 7.0.1, and 6.5.5 and 6.5.4 FP2. A long LDAP bind request can trigger a NULL dereference, causing the service to crash (DoS). Vendor-patched versions include Domino 6.5.5 and 7.0.1 / 6.5.4 FP2; a workaround was described...

CVE-2005-2712

The LDAP server nldap.exe in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service crash via a long bind request, which triggers a null dereference...

Lotus Domino LDAP Server Crafted Packet Remote DoS

The LDAP server on the remote host appears to have crashed after being sent a malformed request. The specific request used is known to crash the LDAP server in Lotus Domino 7.0. By leveraging this flaw, an attacker may be able to deny service to legitimate users. %NASLMINLEVEL 70300 C Tenable...

[SA18738] IBM Lotus Domino LDAP Server Denial of Service Vulnerability

TITLE: IBM Lotus Domino LDAP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18738 VERIFY ADVISORY: http://secunia.com/advisories/18738/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: IBM Lotus Domino 7.x http://secunia.com/product/5746/ DESCRIPTION: Evgeny...

CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths. A user can leverage this issue to crash not...

Ubuntu 4.10 / 5.04 : evolution vulnerabilities (USN-166-1)

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...

CVE-2005-2712

The LDAP server nldap.exe in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service crash via a long bind request, which triggers a null dereference...

LDAP allows null bases

It is possible to disclose LDAP information. SPDX-FileCopyrightText: 2005 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10722"...

GLSA-200509-04 : phpLDAPadmin: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-200509-04 phpLDAPadmin: Authentication bypass Alexander Gerasiov discovered a flaw in login.php preventing the application from validating whether anonymous bind has been disabled in the target LDAP server configuration. Impact :...