125 matches found
Microsoft Active Directory Federation Services Information Disclosure Vulnerability (3003381)
This host is missing an important security update according to Microsoft Bulletin MS14-077. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
KLA10612 Information disclosure vulnerability in Microsoft AD Federation Services
An unspecified vulnerability was found in Microsoft AD Federation Services. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via unattended workstation manipulations. Original advisories CVE-2014-6331 Exploitation...
CVE-2014-6331: Undefined Security Weakness
Microsoft Active Directory Federation Services AD FS 2.0, 2.1, and 3.0, when a configured SAML Relying Party lacks a sign-out endpoint, does not properly process logoff actions, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation, aka "Active...
Microsoft Active Directory Federation Services CVE-2014-6331 Information Disclosure Vulnerability
Description Microsoft Active Directory Federation Services is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Microsoft Active Directory Federation Services 2.0...
Microsoft Active Directory LDAP Server Username Enumeration Weakness
No description provided by source. source: http://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid...
Microsoft Active Directory CVE-2014-1812 Privilege Escalation Vulnerability
Description Microsoft Active Directory is prone to a privilege-escalation vulnerability. An authenticated attacker can exploit this issue to gain access to services with escalated privileges. Technologies Affected Avaya Aura Conferencing 6.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura...
[Directory Scanner v3.0] Remote Directory Server Fingerprinting Tool
Directory Scanner is the FREE Directory Server fingerprinting tool. It can help you to remotely detect the type of Directory servers such as Microsoft Active Directory, Novell eDirectory etc running on the local network as well as Internet. In addition to this, it can greatly help administrators ...
CVE-2013-3868
Microsoft Active Directory Lightweight Directory Service AD LDS on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service LDAP...
CVE-2013-3868: Improper Input Validation
Microsoft Active Directory Lightweight Directory Service AD LDS on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service LDAP...
Microsoft LDAP Remote Anonymous Denial of Service (MS13-079; CVE-2013-3868)
A denial of service vulnerability exists in implementations of Microsoft Active Directory...
CVE-2013-3185: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Active Directory Federation Services AD FS 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by...
Microsoft Active Directory Federation Services CVE-2013-3185 Information Disclosure Vulnerability
Description Microsoft Active Directory Federation Services is prone to an information disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPil...
Memory corruption
The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...
CVE-2013-1282
The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...
CVE-2013-1282
CVE-2013-1282 affects the LDAP service in Microsoft Active Directory family (AD DS, ADAM, AD LDS). The vulnerability allows a remote attacker to cause memory consumption and a denial of service by sending a crafted LDAP query, leading to service outage. The root cause is the LDAP service failing ...
CVE-2013-1282: Improper Input Validation
The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...
CentOS Update for libipa_hbac CESA-2013:0663 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for sssd RHSA-2013:0663-01
Check for the Version of sssd OpenVAS Vulnerability Test RedHat Update for sssd RHSA-2013:0663-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Microsoft Active Directory buffer overflow
Buffer overflow on LDAP request parsing...
Microsoft Active Directory LDAPS Authentication Bypass Vulnerability
Description Microsoft Active Directory is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions by using a revoked certificate. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya CallPilot 4.0 Avaya CallPilot 5.0...