12212 matches found
Joomla! -- Core - Unauthorized Login vulnerability
The JSST and the Joomla! Security Center report: 20140902 - Core - Unauthorized Logins Inadequate checking allowed unauthorized logins via LDAP authentication...
Multiple Vendors LDAP Server Remote Denial of Service Vulnerabilities (CVE-2011-0917)
An integer overflow vulnerabilities exists in IBM Lotus Domino's LDAP service and IBM Tivoli Directory Server. The vulnerabilities is due to incorrect handling of the name parameter by the library nnotes.dll when it processes ASN.1-encoded LDAP BindRequests. An attacker may leverage this issue by...
RedHat Update for krb5 RHSA-2014:1255-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 5 : krb5 (ELSA-2014-1255)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1255 advisory. 1.6.1-80.el5 - rebuild 1.6.1-79.el5 - incorporate fix for MITKRB5-SA-2014-001 CVE-2014-4345, 1132785 Tenable has extracted the preceding description block...
Moderate: Red Hat Security Advisory: krb5 security update
Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...
krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001)
A buffer overflow was found in the KADM5 administration server kadmind when it was used with an LDAP back end for the KDC database. A remote, authenticated attacker could potentially use this flaw to execute arbitrary code on the system running kadmind...
Anonymous authentication in ldap_bind() function of PHP, using null byte
More info at https://framework.zend.com/security/advisory/ZF2014-05...
Anonymous authentication in ldap_bind() function of PHP, using null byte
More info at https://framework.zend.com/security/advisory/ZF2014-05...
CommuniGate Systems CommuniGate Pro LDAP Server Buffer Overflow
There exists a buffer overflow vulnerability in CommuniGate Systems CommuniGate Pro LDAP server. The flaw is caused by improper validation of the user supplied LDAP message. An attacker may exploit this vulnerability to cause a denial of service condition of the affected server...
Mandriva Linux Security Advisory : krb5 (MDVSA-2014:165)
Updated krb5 package fixes security vulnerabilities : MIT Kerberos 5 allows attackers to cause a denial of service via a buffer over-read or NULL pointer dereference, by injecting invalid tokens into a GSSAPI application session CVE-2014-4341, CVE-2014-4342. MIT Kerberos 5 allows attackers to cau...
CVE-2014-6232
Unspecified vulnerability in the LDAP euldap extension before 2.8.18 for TYPO3 allows remote authenticated users to obtain sensitive information via unknown vectors...
Code injection
Unspecified vulnerability in the LDAP euldap extension before 2.8.18 for TYPO3 allows remote authenticated users to obtain sensitive information via unknown vectors...
CVE-2014-6232
The TYPO3 eu_ldap extension is affected by CVE-2014-6232: an unspecified vulnerability in versions before 2.8.18 allows remote authenticated users to obtain sensitive information via unknown vectors. The connected TYPO3 security bulletin confirms affected versions up to 2.8.17 and provides a fix ...
CVE-2014-6232
Unspecified vulnerability in the LDAP euldap extension before 2.8.18 for TYPO3 allows remote authenticated users to obtain sensitive information via unknown vectors...
CentOS Update for 389-ds-base CESA-2014:1031 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[20140902] - Core - Unauthorised Logins
Inadequate checking allowed unauthorised logins via LDAP authentication...
MIT krb5 kadmind buffer overflow
Buffer overflow via LDAP...
MITKRB5-SA-2014-001 Buffer overrun in kadmind with LDAP backend
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 MITKRB5-SA-2014-001 MIT krb5 Security Advisory 2014-001 Original release: 2014-08-07 Last update: 2014-08-07 Topic: Buffer overrun in kadmind with LDAP backend CVSSv2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Base Score: 8.5 Access...
Updated krb5 package fixes security vulnerabilities
MIT Kerberos 5 allows attackers to cause a denial of service via a buffer over-read or NULL pointer dereference, by injecting invalid tokens into a GSSAPI application session CVE-2014-4341, CVE-2014-4342. MIT Kerberos 5 allows attackers to cause a denial of service via a double-free flaw or NULL...
openSUSE Security Update : krb5 / krb5-doc / krb5-mini (openSUSE-SU-2014:1043-1)
Thit MIT krb5 update fixes the following security issue : - buffer overrun in kadmind with LDAP backend bnc891082, CVE-2014-4345 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...