ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

ldsview

ldsview LDAP 目录转储 LDIF 格式的离线搜索工具。 功能特性 快速且内存高效的 LDIF 文件解析 构建 ldapsearch 命令以从目录中提取 LDIF 显示目录结构 UAC 和目录时间格式转换 配置 配置选项可通过 CLI 标志、环境变量或配置文件传递，借助 viper。请参考项目文档了解所有不同的配置提供方式。 默认情况下，ldsview 会在用户主目录中查找名为 .ldsview.json,toml,yaml 的文件 应用程序会读取前缀为 LDSVIEW 的环境变量 使用说明 详细的使用信息可通过 --help 标志或 ldsview 及其所有子命令的 help...

LDAP-Password-Hunter

LDAP 密码猎人 由于旧服务需求或不良安全实践，密码在LDAP数据库中对任何能够通过身份验证的用户都是可读的。 LDAP密码猎人是一个工具，它封装了getTGT.py（Impacket）和ldapsearch的功能，用于查找存储在LDAP数据库中的密码。Impacket的getTGT.py脚本用于对枚举使用的域账户进行身份验证，并保存其TGT Kerberos票据。随后，TGT票据被导出到KRB5CCNAME变量中，ldapsearch脚本利用该变量进行身份验证，并为每个运行LDAP密码猎人的域/DC获取TGS...

bofhound

本仓库已不再活跃 ⛔🚧 本仓库已不再维护。若要提交问题、拉取请求或获取最新版本，请参阅 https://github.com/coffeegist/bofhound 🚧⛔ root@kitploit: | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. | | | | | | | | | | | | | | | | | | | . | | | | | | | | | --' | | | | | | | | --' | | --' | | |\ | ...

PT-2026-86819

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

MiracleLinux 7 : 389-ds-base-1.3.7.5-21.el7 (AXSA:2018-3062:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3062:05 advisory. 389-ds-base: ns-slapd crash via large filter value in ldapsearch CVE-2018-1089 Tenable has extracted the preceding description block directly from the...

EUVD-2025-1630

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-10935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort. CVE-2018-10935 Note...

SUSE: Security Advisory (SUSE-SU-2019:1207-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the 389 Directory Server, a catalog service server, related to uncontrolled resource consumption, allows attackers to cause system failures.

The vulnerability of the 389 Directory Server catalog service server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a malfunction in the server’s operation due to the ldapsearch sorting on the server si...

SUSE-SU-2019:1207-2 Security update for 389-ds

This update for 389-ds fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 - CVE-2017-15134: Fixed a remote denial of service via...

openSUSE Security Update : 389-ds (openSUSE-2019-1397)

This update for 389-ds fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 - CVE-2017-15134: Fixed a remote denial of service vi...

OPENSUSE-SU-2019:1397-1 Security update for 389-ds

This update for 389-ds fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 - CVE-2017-15134: Fixed a remote denial of service via...

Security update for 389-ds (important)

openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2019:1397-1 Rating: important References: 1076530 1096368 1105606 1106699 Cross-References: CVE-2017-15134 CVE-2017-15135 CVE-2018-10850 CVE-2018-10935 CVE-2018-14624 Affected Products: openSUSE Leap 15.0 An update...

Red Hat 389 Directory Server ns-slapd ldapsearch Buffer Overflow (CVE-2018-1089)

A stack buffer overflow vulnerability has been discovered in 389 Directory Server. The vulnerability is due to improper handling of overly long filter values within ldapsearch queries. A remote attacker can issue a crafted query in order to trigger the vulnerability and cause arbitrary code...

EulerOS 2.0 SP3 : 389-ds-base (EulerOS-SA-2018-1365)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - race condition on reference counter leads to DoS using persistent search CVE-2018-10850 - ldapsearch with server side sort allows users to...

389-ds-base security, bug fix, and enhancement update

1.3.8.4-15 - Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch 1.3.8.4-14 - Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack 1.3.8.4-13 - Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in deletepasswdPolicy when...

MGASA-2018-0404 Updated 389-ds-base packages fix security vulnerabilities

Updated 389-ds-base package fixes security vulnerabilities: a race condition on reference counter leads to DoS using persistent search CVE-2018-10850 ldapsearch with server side sort allows users to cause a crash CVE-2018-10935 a server crash through the modify command with large DN CVE-2018-1462...

Updated 389-ds-base packages fix security vulnerabilities

Updated 389-ds-base package fixes security vulnerabilities: a race condition on reference counter leads to DoS using persistent search CVE-2018-10850 ldapsearch with server side sort allows users to cause a crash CVE-2018-10935 a server crash through the modify command with large DN CVE-2018-1462...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20180925)

Security Fixes : - 389-ds-base: race condition on reference counter leads to DoS using persistent search CVE-2018-10850 - 389-ds-base: ldapsearch with server side sort allows users to cause a crash CVE-2018-10935 - 389-ds-base: Server crash through modify command with large DN CVE-2018-14624 -...