82 results · Feed
-
Unscored —
A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead…
-
Medium 6.5
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a …
-
Unscored —
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect …
-
Unscored —
A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, the…
-
Unscored —
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause imp…
-
Unscored —CVE-2022-0918 Public exploit
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access …
-
Unscored —
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker c…
-
Unscored —
When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a sp…
-
Unscored —
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or …
-
Medium 4.3
A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the dscreate and d…
-
Medium 6.5
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute v…
-
Medium 5.3
In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worke…
-
High 7.5
A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in t…
-
High 7.5
A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function…
-
Medium 6.5
A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch wit…
-
High 7.5
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the…
-
Low 3.8
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default…
-
Medium 6.5
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind …
-
Medium 5.9
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persiste…
-
High 7.5
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters need…
-
Low 3.7
389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniqueness_entry_to_config…
-
Unscored —
An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all v…
-
Unscored —
A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x be…
-
Unscored —
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison …
-
Unscored —
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entri…
-
Unscored —
389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout d…
-
Unscored —
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Re…
-
Unscored —
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Re…
-
Unscored —
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Re…
-
Unscored —
slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote atta…
-
Unscored —
389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference w…
-
Unscored —
389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when…
-
Unscored —
389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog"…
-
Unscored —
The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) …
-
Unscored —
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensi…
-
Unscored —
The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to con…
-
Unscored —
389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cau…
-
Unscored —
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via…
-
Unscored —
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attrib…
-
Unscored —
The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1…