46 matches found
LDAP-Password-Hunter
Chasseur de Mots de Passe LDAP Il arrive que, en raison d'exigences de services hérités ou simplement de mauvaises pratiques de sécurité, les mots de passe soient lisibles par tous dans la base de données LDAP pour tout utilisateur capable de s'authentifier. LDAP Password Hunter est un outil qui...
ldsview
ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...
ldsview
ldsview Outil de recherche hors ligne pour les exports d'annuaire LDAP au format LDIF. Fonctionnalités Analyse rapide et économe en mémoire des fichiers LDIF Construire des commandes ldapsearch pour extraire un LDIF d'un annuaire Afficher la structure de l'annuaire Traduction des formats UAC et d...
bofhound
CE DÉPÔT N'EST PLUS ACTIF ⛔🚧 Ce dépôt n'est plus maintenu. Pour soumettre un problème, une pull request ou obtenir la dernière version, référez-vous à https://github.com/coffeegist/bofhound 🚧⛔ | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. | | | |...
PT-2026-86819
Name of the Vulnerable Software and Affected Versions 389-ds-base versions prior to 3.3.1+8c2711bd6-1.1 Description The Cockpit 389 Console's LDAP editor improperly constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper...
MiracleLinux 7 : 389-ds-base-1.3.7.5-21.el7 (AXSA:2018-3062:05)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3062:05 advisory. 389-ds-base: ns-slapd crash via large filter value in ldapsearch CVE-2018-1089 Tenable has extracted the preceding description block directly from the...
EUVD-2025-1630
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-10935
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort. CVE-2018-10935 Note...
CVE-2025-27497: Loop with Unreachable Exit Condition
OpenDJ is an LDAPv3 compliant directory service. OpenDJ prior to 4.9.3 contains a denial-of-service DoS vulnerability that causes the server to become unresponsive to all LDAP requests without crashing or restarting. This issue occurs when an alias loop exists in the LDAP database. If an ldapsear...
CVE-2025-0367: Inefficient Regular Expression Complexity
In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service ReDoS attack...
SUSE: Security Advisory (SUSE-SU-2019:1207-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the 389 Directory Server, a catalog service server, related to uncontrolled resource consumption, allows attackers to cause system failures.
The vulnerability of the 389 Directory Server catalog service server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a malfunction in the server’s operation due to the ldapsearch sorting on the server si...
SUSE-SU-2019:1207-2 Security update for 389-ds
This update for 389-ds fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 - CVE-2017-15134: Fixed a remote denial of service via...
openSUSE Security Update : 389-ds (openSUSE-2019-1397)
This update for 389-ds fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 - CVE-2017-15134: Fixed a remote denial of service vi...
OPENSUSE-SU-2019:1397-1 Security update for 389-ds
This update for 389-ds fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 - CVE-2017-15134: Fixed a remote denial of service via...
Security update for 389-ds (important)
openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2019:1397-1 Rating: important References: 1076530 1096368 1105606 1106699 Cross-References: CVE-2017-15134 CVE-2017-15135 CVE-2018-10850 CVE-2018-10935 CVE-2018-14624 Affected Products: openSUSE Leap 15.0 An update...
Red Hat 389 Directory Server ns-slapd ldapsearch Buffer Overflow (CVE-2018-1089)
A stack buffer overflow vulnerability has been discovered in 389 Directory Server. The vulnerability is due to improper handling of overly long filter values within ldapsearch queries. A remote attacker can issue a crafted query in order to trigger the vulnerability and cause arbitrary code...
EulerOS 2.0 SP3 : 389-ds-base (EulerOS-SA-2018-1365)
According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - race condition on reference counter leads to DoS using persistent search CVE-2018-10850 - ldapsearch with server side sort allows users to...
389-ds-base security, bug fix, and enhancement update
1.3.8.4-15 - Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch 1.3.8.4-14 - Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack 1.3.8.4-13 - Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in deletepasswdPolicy when...
MGASA-2018-0404 Updated 389-ds-base packages fix security vulnerabilities
Updated 389-ds-base package fixes security vulnerabilities: a race condition on reference counter leads to DoS using persistent search CVE-2018-10850 ldapsearch with server side sort allows users to cause a crash CVE-2018-10935 a server crash through the modify command with large DN CVE-2018-1462...