CVE-2014-0074

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty 1 username or 2 password...

Authentication flaw

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty 1 username or 2 password...

CVE-2014-0074

CVE-2014-0074 affects Apache Shiro 1.x before 1.2.3 when an LDAP server allows unauthenticated binds, enabling bypass of authentication. The Red Hat advisory RHSA-2014:1369 notes this issue is addressed in Fuse ESB Enterprise/MQ Enterprise 7.1.0 with Rollup Patch 1 (7.1.0 R1 P6). The vulnerabilit...

CVE-2014-0074

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty 1 username or 2 password...

CVE-2014-0074

Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled, allows remote attackers to bypass authentication via an empty 1 username or 2 password...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 security update

Red Hat JBoss Fuse and A-MQ 6.1.0 Rollup Patch 1, which addresses several security issues, multiple bug fixes, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability...

Joomla! 2.5.x < 2.5.25 / 3.x < 3.2.5 / 3.3.x < 3.3.4 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.25, 3.x prior to 3.2.5, or 3.3.x prior to 3.3.4. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the commedi...

Joomla! -- Core - Unauthorized Login vulnerability

The JSST and the Joomla! Security Center report: 20140902 - Core - Unauthorized Logins Inadequate checking allowed unauthorized logins via LDAP authentication...

Multiple Vendors LDAP Server Remote Denial of Service Vulnerabilities (CVE-2011-0917)

An integer overflow vulnerabilities exists in IBM Lotus Domino's LDAP service and IBM Tivoli Directory Server. The vulnerabilities is due to incorrect handling of the name parameter by the library nnotes.dll when it processes ASN.1-encoded LDAP BindRequests. An attacker may leverage this issue by...

RedHat Update for krb5 RHSA-2014:1255-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : krb5 (ELSA-2014-1255)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1255 advisory. 1.6.1-80.el5 - rebuild 1.6.1-79.el5 - incorporate fix for MITKRB5-SA-2014-001 CVE-2014-4345, 1132785 Tenable has extracted the preceding description block...

Moderate: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...

krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001)

A buffer overflow was found in the KADM5 administration server kadmind when it was used with an LDAP back end for the KDC database. A remote, authenticated attacker could potentially use this flaw to execute arbitrary code on the system running kadmind...

Anonymous authentication in ldap_bind() function of PHP, using null byte

More info at https://framework.zend.com/security/advisory/ZF2014-05...

Anonymous authentication in ldap_bind() function of PHP, using null byte

More info at https://framework.zend.com/security/advisory/ZF2014-05...

CommuniGate Systems CommuniGate Pro LDAP Server Buffer Overflow

There exists a buffer overflow vulnerability in CommuniGate Systems CommuniGate Pro LDAP server. The flaw is caused by improper validation of the user supplied LDAP message. An attacker may exploit this vulnerability to cause a denial of service condition of the affected server...

Mandriva Linux Security Advisory : krb5 (MDVSA-2014:165)

Updated krb5 package fixes security vulnerabilities : MIT Kerberos 5 allows attackers to cause a denial of service via a buffer over-read or NULL pointer dereference, by injecting invalid tokens into a GSSAPI application session CVE-2014-4341, CVE-2014-4342. MIT Kerberos 5 allows attackers to cau...

CVE-2014-6232

Unspecified vulnerability in the LDAP euldap extension before 2.8.18 for TYPO3 allows remote authenticated users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in the LDAP euldap extension before 2.8.18 for TYPO3 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-6232

The TYPO3 eu_ldap extension is affected by CVE-2014-6232: an unspecified vulnerability in versions before 2.8.18 allows remote authenticated users to obtain sensitive information via unknown vectors. The connected TYPO3 security bulletin confirms affected versions up to 2.8.17 and provides a fix ...