Lucene search
K

166 matches found

Prion
Prion
added 2008/10/15 12:12 a.m.15 views

Buffer overflow

Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for 1 LDAP and 2 LDAPS requests, which allows remote attackers to execute arbitrary code via a crafted request, aka "Active Directory Overflow Vulnerability."...

10CVSS8AI score0.60161EPSS
Exploits1References9
Symantec
Symantec
added 2008/10/14 12:0 a.m.35 views

Microsoft Windows Active Directory LDAP Request Handling Remote Code Execution Vulnerability

Description Microsoft Windows Active Directory is prone to a remote code-execution vulnerability that arises because the application fails to handle specially crafted LDAP or LDAP over SSL LDAPS requests in a proper manner. Successfully exploiting this issue would allow an attacker to execute...

0.6AI score
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/12/24 12:0 a.m.32 views

Fedora 7 : autofs-5.0.1-31 (2007-4709)

Fri Dec 21 2007 Ian Kent - 5.0.1-31 - Bug 426399: CVE-2007-6285 autofs default doesn't set nodev in /net f7 - use mount option 'nodev' for '-hosts' map unless 'dev' is explicily specified. - Tue Dec 18 2007 Ian Kent - 5.0.1-30 - Bug 397591 SELinux is preventing /sbin/rpc.statd rpcdt 'search' to...

6.9CVSS5.5AI score0.00091EPSS
Exploits1References3
Cvelist
Cvelist
added 2005/10/06 4:0 a.m.20 views

CVE-2005-3170

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer LDAPS even when the Certificate Authority CA is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site...

6.4AI score0.00777EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2005/10/06 4:0 a.m.11 views

CVE-2005-3170

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer LDAPS even when the Certificate Authority CA is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site...

6.7AI score0.00777EPSS
Exploits0References2
CVE
CVE
added 2005/10/06 4:0 a.m.51 views

CVE-2005-3170

CVE-2005-3170 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The LDAP client accepts LDAPS certificates even when the CA is not trusted, enabling attackers to mislead users into thinking they are on a trusted site. No exploitation details are provided in the sources. Remediation...

5.1CVSS6.8AI score0.00777EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder