11782 matches found
CVE-2015-0546
CVE-2015-0546 affects EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1. The issue is an authentication bypass in LDAP mode: an attacker with knowledge of a valid username could bypass authentication and gain unauthorized access to UIM/P. The affected component is the LDAP authenticatio...
EAP: LDAP bind password is being logged with TRACE log level
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...
Apache Hive Authentication Vulnerability
Apache Hive is database software that facilitates querying and managing large data sets on distributed storage devices. Apache Hive versions 0.11.0-1.0.0, 1.1.0, the LDAP service is sometimes configured to allow unauthenticated bindings, and when HiveServer2 is configured to use LDAP authenticati...
CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
DEBIAN-CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
Cross site scripting
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
UBUNTU-CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
CVE-2015-2704
CVE-2015-2704 affects realmd: a flaw in how input is parsed when writing configuration into sssd.conf or smb.conf allows a remote attacker to inject arbitrary configurations via a newline in an LDAP response. Affected components are realmd and its DBus service used for realm discovery and enrollm...
IBM Tivoli Directory Server Integer Overrun Buffer Overflow - Ver2 (CVE-2011-1206)
A buffer overflow vulnerability has been reported in IBM Tivoli Directory Server. An attacker could exploit this vulnerability via a crafted LDAP request. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...
Microsoft Active Directory LDAP Request Memory Consumption (MS13-032) - Ver2 (CVE-2013-1282)
A denial of service vulnerability exists in the implementations of Active Directory. Successful exploitation could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query. A Remote attacker can exploit this issue via a...
[ MDVSA-2015:097 ] php-ZendFramework
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:097 http://www.mandriva.com/en/support/security/ Package : php-ZendFramework Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated php-ZendFramework packages fix multiple...
[ MDVSA-2015:185 ] dokuwiki
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:185 http://www.mandriva.com/en/support/security/ Package : dokuwiki Date : March 31, 2015 Affected: Business Server 1.0 Problem Description: Updated dokuwiki packages fix security vulnerabilities:...
Amazon Linux AMI : krb5 (ALAS-2015-518)
A use-after-free flaw was found in the way the MIT Kerberos libgssapikrb5 library processed valid context deletion tokens. An attacker able to make an application using the GSS-API library libgssapi could call the gssprocesscontexttoken function and use this flaw to crash that application...
Medium: krb5
Issue Overview: A use-after-free flaw was found in the way the MIT Kerberos libgssapikrb5 library processed valid context deletion tokens. An attacker able to make an application using the GSS-API library libgssapi could call the gssprocesscontexttoken function and use this flaw to crash that...
[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...