CVE-2024-6237

all versions

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while se

6.5MEDIUM

CVE-2024-1062

all versions

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars

5.5MEDIUM

CVE-2023-1055

all versions

A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the use

5.5MEDIUM

CVE-2022-2850

all versions

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointe

6.5MEDIUM

CVE-2022-1949

all versions

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, bu

7.5HIGH

CVE-2020-35518

all versions

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This c

5.3MEDIUM

CVE-2020-1472

< 4.4.5-0101

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a d

5.5MEDIUM

CVE-2019-19344

all versions

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba

6.5MEDIUM

CVE-2019-14907

all versions

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log

6.5MEDIUM

CVE-2010-3282

all versions

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit lo

3.3LOW

CVE-2010-2222

all versions

The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of s

7.5HIGH

CVE-2019-3870

all versions

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new

6.1MEDIUM

CVE-2017-7421

all versions

Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration

6.1MEDIUM

CVE-2017-5187

all versions

A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Fo

8.8HIGH

CVE-2014-3562

all versions

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replic

CVE-2013-4485

<= 8.2

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial

CVE-2013-2219

<= 8.2

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which

CVE-2012-2746

<= 8.2

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been cha

CVE-2012-2678

<= 8.2

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been c

CVE-2011-0532

all versions

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka R

CVE-2011-0022

all versions

The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are con

CVE-2011-0019

all versions

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simpl

CVE-2010-2241

all versions

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissio

CVE-2008-3283

all versions

Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 an

CVE-2008-2930

all versions

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to c

CVE-2008-2929

all versions

Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Di

CVE-2008-2928

all versions

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote att

CVE-2008-1677

all versions

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to ca

CVE-2008-0893

all versions

Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scrip

CVE-2008-0892

all versions

The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0

CVE-2008-0889

all versions

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console scrip

CVE-2008-0890

<= 7.1

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR

CVE-2004-1236

all versions

Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote a

CVE-2004-0826

all versions

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code v

CVE-2001-0164

<= 4.12

Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbi

CVE-2000-1076

all versions

Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, wh

CVE-2000-1075

all versions

Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers t

CVE-1999-0807

all versions

The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.

CVE-1999-0007

all versions

Information from SSL-encrypted sessions via PKCS #1.