2401 matches found
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the openldap package up to version 2.4.35 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the compat-openldap-2.4.192.3.43 package for the Red Hat Enterprise Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian DLA-203-1 : openldap security update
Multiple vulnerabilities were found in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. Please carefully check whether you are affected by CVE-2014-9713: if you are, you will need to manually upgrade your configuration! See below for more details on this. Just upgradi...
[SECURITY] [DLA 203-1] openldap security update
Package : openldap Version : 2.4.23-7.3+deb6u1 CVE IDs : CVE-2012-1164 CVE-2013-4449 CVE-2014-9713 CVE-2015-1545 Debian Bugs : 663644 729367 761406 776988 Multiple vulnerabilities were found in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. Please carefully check...
DLA-203-1 openldap - security update
Bulletin has no description...
Fedora Update for openldap FEDORA-2015-2055
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : openldap-2.4.40-3.fc21 (2015-2055)
CVE-2015-1545 openldap: slapd crashes on search with deref control and empty attr list Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...
[SECURITY] Fedora 21 Update: openldap-2.4.40-3.fc21
OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...
[SECURITY] [DSA 3209-1] openldap security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3209-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 30, 2015 http://www.debian.org/security/faq -...
OpenLDAP multiple security vulnerabilities
DoS, privilege escalation...
Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)
The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-004. It is, therefore, affected multiple vulnerabilities in the following components : - Apache - ATS - Certificate Trust Policy - CoreAnimation - FontParser - Graphics Driver - ImageIO -...
Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)
The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - Apache - ATS - Certificate Trust Policy - CFNetwork HTTPProtocol - CFNetwork Session - CFURL - CoreAnimation -...
Updated openldap packages fix CVE-2015-1545
Updated openldap packages fix security vulnerability: The deref overlay in slapd 2.4.13 through 2.4.40 dereferences a NULL pointer when a search request includes the Deref control with an empty list of attributes to return missing input validation. This allows a remote unauthenticated client to...
MGASA-2015-0143 Updated openldap packages fix CVE-2015-1545
Updated openldap packages fix security vulnerability: The deref overlay in slapd 2.4.13 through 2.4.40 dereferences a NULL pointer when a search request includes the Deref control with an empty list of attributes to return missing input validation. This allows a remote unauthenticated client to...
Samba / OpenLDAP Jitterbug Cross Site Scripting
Exploit Title: Samba.org and OpenLDAP.org Reflected XSS Date: 02/04/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.samba.org & www.openldap.org Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: Samba.org and OpenLDAP.org main domains Samba...
SOL16343 - OpenLDAP vulnerabilities CVE-2015-1545 and CVE-2015-1546
Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...
Debian openldap Privilege Modification Vulnerability
OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP. A security vulnerability in the default slapd configuration in Debian openldap allows an authenticated, remote attacker to exploit the vulnerability to modify user permissions and other user...
CVE-2014-9713
The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors...
Design/Logic Flaw
The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors...