Have JIRA delete cookie when user authentication fails

I would like to suggest that if JIRA loads the user details id and password from a cookie and attempts to authenticate and fails then JIRA should delete the cookie. The logic behind this is: We are using LDAP for authentication to Novell's NDS and if a user gets JIRA to remember their id and...

Have JIRA delete cookie when user authentication fails

I would like to suggest that if JIRA loads the user details id and password from a cookie and attempts to authenticate and fails then JIRA should delete the cookie. The logic behind this is: We are using LDAP for authentication to Novell's NDS and if a user gets JIRA to remember their id and...

Novell NetWare ncp Service NDS Object Enumeration

This host is a Novell NetWare eDirectory server, and has browse rights on the PUBLIC object. It is possible to enumerate all NDS objects, including users, with crafted queries. An attacker can use this to gain information about this host. This script was written by Forrest Rae See the Nessus...

CVE-2001-1233

Netware Enterprise Web Server 5.1 with GroupWise WebAccess 5.5 and NDS enabled is affected. The vulnerability allows remote attackers to enumerate usernames, group names and other system information by accessing ndsobj.nlm, due to exposure of directory information. CVSS v2.0 base score is 5.0 (AV...

Повышение прав доступа в Novell Netware client для Windows (privelege escalation)

Если существует локальный пользовательи пользователь NDS с правами администрирования домена Windows NT с таким же именем, то можно подключиться по сети с использованием имени пользователя без пароля...

Possible privilege escalation with NDS for NT

The following security exposure may or may not exist for any shop running NDS for NT. We contacted Novell last August with this exposure. They failed to respond. We later contacted Simple Nomad and he did a good job bringing the vulnerability to Novell's attention. Novell indicates that this is...

CVE-1999-1020

CVE-1999-1020 concerns Novell Netware NDS 5.99 where an unauthenticated client can read the NDS tree, exposing sensitive objects (users, groups, etc.) via CX.EXE and NLIST.EXE. Connected sources corroborate an RRD (read) vulnerability enabling tree browsing or unauthenticated access to NDS conten...

CVE-1999-1528

ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session...

CVE-1999-1528

ProSoft Netware Client 5.12 for Macintosh MacOS 9 fails to log a user out of the NDS tree on system logout, potentially allowing other local users to access an unprotected NDS session. This CVE (CVE-1999-1528) is described in public records as a local-privilege/access concern with partial confide...

Groupwise Webaccess, NetWare web server, and Novell

No idea if this is what the Groupwise Padlock http://www.novell.com/padlock thing is about, since Novell is not only vague in the issues, but never acknowledged Adept's findings. - Simple Nomad - "No rest for the Wicca'd" - - [email protected] - - - [email protected] - www.nmrc.org...

groupwise.disclosure.txt

No idea if this is what the Groupwise Padlock http://www.novell.com/padlock thing is about, since Novell is not only vague in the issues, but never acknowledged Adept's findings. - Simple Nomad - "No rest for the Wicca'd" - - [email protected] - - - [email protected] - www.nmrc.org...

Утечка информации в Novell Netware (Object enumeration)

Сервера Netware с поддержкой TCP/IP сообщают информацию об объектах NDS через анонимное соединение TCP/524...

Re: Bypassing Inherited Rights Filters in Novell Directory Services.

At 07:24 PM 9/7/2000 -0700, you wrote: Here's an example. An administrator, .BOB.ACME, has Supervisor S rights to the .ACME container. There is a container, .SECRET.ACME, which BOB should not have any access to. If you understood NDS sufficiently, you wouldn't give Bob S rights to a container whe...

Пользователь может обойти Inherited Rights Filters (IRF) в Novell Netware

Права на избранные свойства Selected Property Rights в Novell Netware могут наследоваться, но не могут быть блокированы с помощью IRF. Таким образом пользователь, имеющий права на родительский объект может овладеть дочерним объектом NDS, установив права на родительский объект и объявив их...

CVE-1999-1528

ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session...

Novell Netware 4.1/4.11 - SP5B NDS Default Rights

source: https://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options in CX.EXE and NLIST.EXE, anyone connecting to the...

Novell Netware 4.14.11 - SP5B NDS Default Rights

Novell Netware 4.14.11 - SP5B NDS Default Rights source: https://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options ...

CVE-1999-1020

The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE...