111 matches found
Microsoft Active Directory Encoded LDAP String Memory Corruption Remote Code Execution Vulnerability
Description Microsoft Active Directory is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful exploits will completely compromise the affected computer. Failed attacks will cause denial-of-service...
Microsoft Active Directory Memory Leak Denial Of Service Vulnerability
Description Microsoft Active Directory is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the server, denying access to legitimate users. Technologies Affected Avaya Messaging Application Server Avaya Messaging Application Server MM 1.1 Avaya Messaging...
RSA Panel Review – Macs in the Enterprise
Managing IT for a software company has its challenges. For me, the lines between efficiency, security and innovation are difficult to draw at a company like nCircle where engineers require some freedom to perform their best. The panelists at the RSA session “Responding to the ignored threat – Mac...
Microsoft Active Directory LDAP Search Request Buffer Overflow (MS08-060; CVE-2008-4023)
Active Directory is an implementation of LDAP directory services by Microsoft. Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. A remote code execution vulnerability has been reported in Microsoft Windows Active...
Microsoft Active Directory DoS
Uninitialized memory reference on LDAP processing...
Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039; CVE-2007-0040)
Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. Multiple vulnerabilities have been reported in Microsoft Windows Active Directory. The flaws are in the way the Active Directory handles LDAP requests. The...
Microsoft活动目录登录用户名枚举漏洞
Microsoft Active Directory是一款目录服务，可以实现整个网络的集中式安全管理。。 Microsoft Active Directory存在一个设计缺陷，远程攻击者可以利用漏洞枚举用户名信息。 如果通过Windows终端服务提供合法的用户名，根据域控制器返回的错误消息不同，可导致获得用户名是否存在信息。不过此漏洞只存在于用户帐户被设置了时间限制和这些帐户只有在这些时间里访问才存在。 Microsoft Windows Server 2003 Standard Edition SP2 Microsoft Windows Server 2003 Standard...
Microsoft Windows Active Directory users account enumeration
It's possible to enumerate accounts with Logon Hours limitation set...
Microsoft Active Directory security vulnerability
A few weeks ago, I was developing a script to be run on UNIX that would query a Microsoft Active Directory server via LDAP. I authenticated to the Windows 2000 Realm using Kerberos V for information on Kerberos interoperability see...
DUO-PSA-2020-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2020-002 Publication Date: 2020-04-28 Revision Date: 2020-04-28 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Engineering has identified and fixed an issue with directory sync for on-premises Microsoft Active Directory, OpenLDAP, and...
DUO-PSA-2020-002: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2020-002 Publication Date: 2020-04-28 Revision Date: 2020-04-28 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Engineering has identified and fixed an issue with directory sync for on-premises Microsoft Active Directory, OpenLDAP, and...