2409 matches found
CVE-2008-2330
slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue."...
Design/Logic Flaw
slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue."...
CVE-2008-3539
Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...
HP OpenView Select Identity Connectors本地信息泄漏漏洞
BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID:CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题,本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...
FreeBSD Ports: openldap-server, openldap-sasl-server
The remote host is missing an update to the system as announced in the referenced advisory. VID ae7124ff-547c-11db-8f1a-000a48049292 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: openldap-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: openldap-server, openldap-sasl-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: openldap-server
The remote host is missing an update to the system as announced in the referenced advisory. VID e5d29309-e0db-11dc-97b2-001c2514716c OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: openldap-server
The remote host is missing an update to the system as announced in the referenced advisory. VID db449245-870d-11dc-a3ec-001921ab2fa4 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: openldap-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
OpenLDAP BER Decoding Remote DoS Vulnerability
This vulnerability allows remote attackers to deny services on vulnerable installations of OpenLDAP. Authentication is not required to exploit this vulnerability. The specific flaw exists in the decoding of ASN.1 BER network datagrams. When the size of a BerElement is specified incorrectly, the...
GLSA-200808-09 : OpenLDAP: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200808-09 OpenLDAP: Denial of Service vulnerability Cameron Hotchkies discovered an error within the parsing of ASN.1 BER encoded packets in the 'bergetnext' function in libraries/liblber/io.c. Impact : A remote unauthenticated...
OpenLDAP: Denial of Service vulnerability
Background OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol. Description Cameron Hotchkies discovered an error within the parsing of ASN.1 BER encoded packets in the "bergetnext" function in libraries/liblber/io.c. Impact A remote unauthenticated...
Fedora 8 : pdns-2.9.21.1-1.fc8 (2008-7083)
Wed Aug 6 2008 Ruben Kerkhof 2.9.21.1-1 - CVE-2008-3337 - Sat Feb 9 2008 Ruben Kerkhof 2.9.21-4 - GCC 4.3 fixes - Wed Dec 5 2007 Ruben Kerkhof 2.9.21-3 - Rebuild to pick up new openldap Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : openldap2.2, openldap2.3 vulnerability (USN-634-1)
Cameron Hotchkies discovered that OpenLDAP did not correctly handle certain ASN.1 BER data. A remote attacker could send a specially crafted packet and crash slapd, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the...
[USN-634-1] OpenLDAP vulnerability
=========================================================== Ubuntu Security Notice USN-634-1 August 01, 2008 openldap2.2, openldap2.3 vulnerability CVE-2008-2952 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...
OpenLDAP slapd DoS
Crash on ASR.1 BER data processing...
USN-634-1: OpenLDAP vulnerability
Cameron Hotchkies discovered that OpenLDAP did not correctly handle certain ASN.1 BER data. A remote attacker could send a specially crafted packet and crash slapd, leading to a denial of service...
Security fix for the ALT Linux 8 package freeipa version 1.1.0-3
July 23, 2008 Simo Sorce &[email protected] - 1.1.0-3 - Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug 453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide...