The VapidLabs Vulnerability Database

Vulnerabilities discovered by Larry W. Cashdollar

1 advisory Latest: 2020-10-20
Back to all advisories
Examine in ATT&CK and D3FEND: CVE2CAPEC

Solaris 11 x86 nsdb-update-nci utility can reveal password in temporary file

#959 · 2020-10-20
CVE ID(s): CVE-2020-14758
Notified: 2020-02-25
Description:
The nsdb-update-nci command marks a distinguished name on an LDAP server as a container for FedFS data by adding the fedfsNsdbContainer-Info object class to the root of the naming context and setting the fedfsNcePrefixR attribute to point to the relative DN from the root of the naming context.