Posts Tagged LDAP

3 results.

[20140902] – Core – Unauthorised Logins

Sep23
by Ike on September 23, 2014 at 7:00 pm
Posted In: CMS, Joomla, security, Security Center
  • Project: Joomla!
  • SubProject: CMS
  • Severity: Moderate
  • Versions: 2.5.24 and earlier 2.5.x versions, 3.2.4 and earlier 3.x versions, 3.3.0 through 3.3.3
  • Exploit type: Unauthorised Logins
  • Reported Date: 2014-September-09
  • Fixed Date: 2014-September-23
  • CVE Number: CVE-2014-6632

Description

Inadequate checking allowed unauthorised logins via LDAP authentication.

Affected Installs

Joomla! CMS versions 2.5.24 and earlier 2.5.x versions, 3.2.4 and earlier 3.x versions, 3.3.0 through 3.3.3

Solution

Upgrade to version 2.5.25, 3.2.5, or 3.3.4

Contact

The JSST at the Joomla! Security Center.

Reported By: Matthew Daley

└ Tags: , , , ,
 Comment 

Debian: 2756-1: wireshark: Multiple vulnerabilities

Sep17
by Ike on September 17, 2013 at 2:17 am
Posted In: Other

(Sep 13) Multiple vulnerabilities were discovered in the dissectors for LDAP, RTPS and NBAP and in the Netmon file parser, which could result in denial of service or the execution of arbitrary code. [More…]

└ Tags: , , ,
 Comment 

Debian: 2628-1: nss-pam-ldapd: buffer overflow

Feb20
by Ike on February 20, 2013 at 1:54 am
Posted In: Other

(Feb 18) Garth Mollett discovered that a file descriptor overflow issue in the use of FD_SET() in nss-pam-ldapd, which provides NSS and PAM modules for using LDAP as a naming service, can lead to a stack-based buffer overflow. An attacker could, under some circumstances, use this flaw to [More…]

└ Tags: , , ,
 Comment 

52 queries. 8.75 mb Memory usage. 0.562 seconds.