Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nss ldap nss ldap vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2007-5794
Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot...
Nss Ldap Nss Ldap
7.5
CVSSv2
CVE-2002-0735
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and previous versions allows remote malicious users to cause a denial of service and possibly execute arbitrary code by triggering log messages.
Padl Software Nss Ldap Build 184Padl Software Nss Ldap Build 185Padl Software Nss Ldap Build 189Padl Software Pam Ldap Build 143Padl Software Nss Ldap Build 181Padl Software Nss Ldap Build 183Padl Software Nss Ldap Build 187Padl Software Nss Ldap Build 188C-note Squid Auth Ldap 1.2 B2C-note Squid Auth Ldap 2.0Padl Software Nss Ldap Build 180Padl Software Nss Ldap Build 185.3Padl Software Nss Ldap Build 186C-note Squid Auth Ldap 1.0.1C-note Squid Auth Ldap 1.0.2 BetaPadl Software Nss Ldap Build 185.1Padl Software Nss Ldap Build 185.2
1.2
CVSSv2
CVE-2000-1045
nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote malicious users to cause a denial of service via a flood of LDAP requests.
Padl Software Nss Ldap Build 105Padl Software Nss Ldap Build 113Padl Software Nss Ldap Build 85
7.5
CVSSv2
CVE-2002-0825
Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote malicious users to cause a denial of service and possibly execute arbitrary code.
Padl Software Nss Ldap
4.9
CVSSv2
CVE-2009-1073
nss-ldapd prior to 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.
Debian Nss-ldapDebian Debian Linux 5.0
6.8
CVSSv2
CVE-2013-0288
nss-pam-ldapd prior to 0.7.18 and 0.8.x prior to 0.8.11 allows context-dependent malicious users to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which ...
Arthurdejong Nss-pam-ldapd 0.8.2Arthurdejong Nss-pam-ldapd 0.8.9Arthurdejong Nss-pam-ldapd 0.8.7Arthurdejong Nss-pam-ldapd 0.8.1Arthurdejong Nss-pam-ldapd 0.8.5Arthurdejong Nss-pam-ldapd 0.8.3Arthurdejong Nss-pam-ldapd 0.8.0Arthurdejong Nss-pam-ldapd 0.8.10Arthurdejong Nss-pam-ldapd 0.8.4Arthurdejong Nss-pam-ldapd 0.8.6Arthurdejong Nss-pam-ldapd 0.8.8Arthurdejong Nss-pam-ldapd 0.2.1Arthurdejong Nss-pam-ldapd 0.6.10Arthurdejong Nss-pam-ldapd 0.6.5Arthurdejong Nss-pam-ldapd 0.7.10Arthurdejong Nss-pam-ldapd 0.7.7Arthurdejong Nss-pam-ldapd 0.7.15Arthurdejong Nss-pam-ldapd 0.6.8Arthurdejong Nss-pam-ldapd 0.6.7.1Arthurdejong Nss-pam-ldapd 0.7.8Arthurdejong Nss-pam-ldapd 0.6.0Arthurdejong Nss-pam-ldapd 0.2
6.8
CVSSv2
CVE-2011-0438
nslcd/pam.c in the nss-pam-ldapd 0.8.0 PAM module returns a success code when a user is not found in LDAP, which allows remote malicious users to bypass authentication.
Arthurdejong Nss-pam-ldapd 0.8.0
5.8
CVSSv2
CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and previous versions, OpenSSL prior to 0.9.8l, GnuTLS 2.8.5 and previous versions, Mozilla Network Security Ser...
Openssl Openssl 1.0Apache Http ServerOpenssl OpensslGnu GnutlsMozilla NssDebian Debian Linux 5.0Canonical Ubuntu Linux 10.10Fedoraproject Fedora 11Fedoraproject Fedora 13Debian Debian Linux 4.0Debian Debian Linux 8.0Debian Debian Linux 7.0Canonical Ubuntu Linux 9.04Debian Debian Linux 6.0Fedoraproject Fedora 12Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 9.10Fedoraproject Fedora 14F5 Nginx
4.3
CVSSv2
CVE-2011-3389
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle malicious users...
Opera Opera Browser -Microsoft Internet Explorer -Microsoft Windows -Google Chrome -Mozilla Firefox -Siemens Simatic Rf68xr FirmwareSiemens Simatic Rf615r FirmwareHaxx CurlRedhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server Aus 6.2Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 6.2Debian Debian Linux 5.0Debian Debian Linux 6.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 10.04
5.5
CVSSv2
CVE-2022-22576
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL...
Haxx CurlDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Clustered Data Ontap -Netapp Solidfire \\& Hci Management Node -Netapp Solidfire \\& Hci Storage Node -Brocade Fabric Operating System -Netapp Bootstrap Os -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook