EUVD-2015-1963

Malware in sbrugna...

DEBIAN-CVE-2015-1854

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

CVE-2015-1854

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

CVE-2015-1854

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

CVE-2015-1854

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

CVE-2015-1854

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

CVE-2015-1854

CVE-2015-1854 affects 389-ds-base (Directory Server). The flaw allows an unauthenticated attacker to bypass access controls by issuing an ldapmodrdn call, enabling unauthorized modifications of directory entries. Connected sources (Debian DLA-1428, Debian tracker, Amazon ALAS-2015-538, Fedora 201...

CVE-2015-1854: Improper Access Control

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call...

Important: 389-ds-base

Issue Overview: A flaw was found in the authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. Affected Packages: 389-ds-base Issue...

389-ds-base: access control bypass with modrdn

A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server...

OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service

OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service source: https://www.securityfocus.com/bid/46831/info OpenLDAP is prone to a remote denial-of-service vulnerability that affects the 'modify relative distinguished name' modrdn command. Attackers can exploit this issue to deny service to...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

No description provided by source. Attackers use readily available LDAP commands to exploit this issue. The following command demonstrates this issue: ldapmodrdn -x -h :389 -D dn -w pw -e \noop ou=test,dc=my-domain,dc=com ou=test2...

CVE-2006-1782

Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name rootDN password when a privileged user 1 runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including 2 ldapadd, 3 ldapdelete, 4 ldapmodify, 5 ldapmodrd...

Design/Logic Flaw

Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name rootDN password when a privileged user 1 runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including 2 ldapadd, 3 ldapdelete, 4 ldapmodify, 5 ldapmodrd...

CVE-2006-1782

Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name rootDN password when a privileged user 1 runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including 2 ldapadd, 3 ldapdelete, 4 ldapmodify, 5 ldapmodrd...