Important: 389-ds-base

Issue Overview: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c: It was found that 389-ds-base did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use th...

[SECURITY] [DSA 4166-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4166-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4165-1] ldap-account-manager security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4165-1 [email protected] https://www.debian.org/security/ Luciano Bello April 03, 2018 https://www.debian.org/security/faq -...

Debian DSA-4165-1 : ldap-account-manager - security update

Michal Kedzior found two vulnerabilities in LDAP Account Manager, a web front-end for LDAP directories. - CVE-2018-8763 The found Reflected Cross Site Scripting XSS vulnerability might allow an attacker to execute JavaScript code in the browser of the victim or to redirect her to a malicious...

Ubuntu 16.04 LTS : OpenJDK 8 vulnerabilities (USN-3613-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3613-1 advisory. It was discovered that a race condition existed in the cryptography implementation in OpenJDK. An attacker could possibly use this to expose sensitive...

DSA-4165-1 ldap-account-manager - security update

Bulletin has no description...

USN-3614-1 openjdk-7 vulnerabilities

It was discovered that a race condition existed in the cryptography implementation in OpenJDK. An attacker could possibly use this to expose sensitive information. CVE-2018-2579 It was discovered that the LDAP implementation in OpenJDK did not properly encode login names. A remote attacker could...

USN-3614-1: OpenJDK 7 vulnerabilities

It was discovered that a race condition existed in the cryptography implementation in OpenJDK. An attacker could possibly use this to expose sensitive information. CVE-2018-2579 It was discovered that the LDAP implementation in OpenJDK did not properly encode login names. A remote attacker could...

USN-3613-1: OpenJDK 8 vulnerabilities

It was discovered that a race condition existed in the cryptography implementation in OpenJDK. An attacker could possibly use this to expose sensitive information. CVE-2018-2579 It was discovered that the Hotspot component of OpenJDK did not properly validate uses of the invokeinterface JVM...

Debian: Security Advisory (DSA-4165-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 8 package curl version 7.59.0-alt1

March 31, 2018 Anton Farygin 7.59.0-alt1 - new version - fixes: CVE-2018-1000120 FTP path trickery leads to NIL byte out of bounds write CVE-2018-1000121 LDAP NULL pointer dereference CVE-2018-1000122 RTSP RTP buffer over-read...

[SECURITY] Fedora 28 Update: unboundid-ldapsdk-4.0.5-1.fc28

The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free Java library for communicating with LDAP directory servers and performing related tasks like reading and writing LDIF, encoding and decoding data using base64 and ASN.1 BER, and performing secure communicati o...

Fedora 26 : unboundid-ldapsdk (2018-c188d3f09a)

Rebase packages to version: 4.0.5 CVE-2018-1000134 has been fixed in 4.0.5 release of the UnboundID LDAP SDK for Java. A blog post has been written covering the details of this CVE and is available at https://nawilson.com/2018/03/19/cve-2018-1000134-and-the-unboundid-lda p-sdk-for-java/ Further...

Apache HTTP Server mod_authnz_ldap Denial of Service Vulnerability

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A security vulnerability exists in modauthnzldap in Apache httpd versions 2.0.23 through 2.0.65, 2.2.0 through 2.2.34, and 2.4.0 through 2.4.2...

[SECURITY] Fedora 27 Update: unboundid-ldapsdk-4.0.5-1.fc27

The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free Java library for communicating with LDAP directory servers and performing related tasks like reading and writing LDIF, encoding and decoding data using base64 and ASN.1 BER, and performing secure communicati o...

[SECURITY] Fedora 26 Update: unboundid-ldapsdk-4.0.5-1.fc26

The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free Java library for communicating with LDAP directory servers and performing related tasks like reading and writing LDIF, encoding and decoding data using base64 and ASN.1 BER, and performing secure communicati o...

Roland Gruber Softwareentwicklung LDAP Account Manager Cross-Site Scripting Vulnerability

Roland Gruber Softwareentwicklung LDAP Account Manager is an LDAP account manager for managing various account types in the LDAP directory. A cross-site scripting vulnerability exists in Roland Gruber Softwareentwicklung LDAP Account Manager. A remote attacker can create a cross-site scripting...

Roland Gruber Softwareentwicklung LDAP Account Manager Cross-Site Request Forgery Vulnerability

Roland Gruber Softwareentwicklung LDAP Account Manager is an LDAP account manager for managing various account types in the LDAP directory. A security vulnerability exists in Roland Gruber Softwareentwicklung LDAP Account Manager versions prior to 6.3, which originates when the program places a...

Moderate: Red Hat Security Advisory: openstack-tripleo-common and openstack-tripleo-heat-templates update

An update for openstack-tripleo-common and openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 12.0 Pike. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

Design/Logic Flaw

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=renameform URI...