2350 matches found
CVE-2013-4449
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...
CVE-2013-4449
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...
CVE-2013-4449
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...
CVE-2013-4449
OpenLDAP OpenLDAP rwm overlay vulnerability CVE-2013-4449 allows a remote attacker to crash slapd by unbinding immediately after a search, due to incorrect reference counting. Public disclosures confirm the affected versions (2.4.23, 2.4.36 and earlier) and describe a denial-of-service condition ...
CVE-2013-4449: Undefined Security Weakness
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...
CVE-2013-4449
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...
UBUNTU-CVE-2013-4449
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...
Scientific Linux Security Update : openldap on SL6.x i386/x86_64 (20140203)
A denial of service flaw was found in the way the OpenLDAP server daemon slapd performed reference counting when using the rwm rewrite/remap overlay. A remote attacker able to query the OpenLDAP server could use this flaw to crash the server by immediately unbinding from the server after sending ...
openldap: segfault on certain queries with rwm overlay
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...
PT-2014-1862
Name of the Vulnerable Software and Affected Versions OpenLDAP versions 2.4.23 and earlier Description The issue is related to a denial of service slapd crash that can be caused by remote attackers. This can happen when the rwm overlay in OpenLDAP does not properly count references, allowing...
openldap security and bug fix update
2.4.23-34.1 - fix: segfault on certain queries with rwm overlay 1058250 2.4.23-34 - fix: deadlock during SSLForceHandshake 996373 + revert nss-handshake-threadsafe.patch...
Directory traversal
Directory traversal vulnerability in gmap/viewoverlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" dot dot encoded slash sequences in the overlaytype parameter...
PT-2014-2301
Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.8.1 and earlier Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using '''%2F" dot dot encoded slash sequences in the overlay type...
OpenLDAP rwm Overlay Denial of Service (CVE-2013-4449)
A denial of service vulnerability has been reported in OpenLDAP...
CVE-2013-6389
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
Open redirect
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2013-6389
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
UBUNTU-CVE-2013-6389
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...