[SECURITY] [DSA 3209-1] openldap security update

- ------------------------------------------------------------
-------------
Debian Security Advisory DSA-3209-1                   security@debian.org
http://www.debian.org/security/                         Yves-Alexis Perez
March 30, 2015                         http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openldap
CVE ID         : CVE-2013-4449 CVE-2014-9713 CVE-2015-1545
Debian Bug     : 729367 761406 776988

Multiple vulnerabilities were found in OpenLDAP, a free implementation
of the Lightweight Directory Access Protocol.

CVE-2013-4449

    Michael Vishchers from Seven Principles AG discovered a denial of
    service vulnerability in slapd, the directory server implementation.
    When the server is configured to used the RWM overlay, an attacker
    can make it crash by unbinding just after connecting, because of an
    issue with reference counting.

Cisco Security Advisory: Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability

Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability

Advisory ID: cisco-sa-20150401-dcnm

Revision 1.0

For Public Release 2015 April 1 16:00  UTC (GMT)

+-----------------------------------------------------------
----------

Summary
=======

Cisco Prime Data Center Network Manager (DCNM) contains a file
information disclosure vulnerability that could allow an
unauthenticated, remote attacker to retrieve arbitrary files from the
underlying operating system.

Cisco has released free software updates that address this
vulnerability.

Workarounds that mitigate this vulnerability are not available.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm

[security bulletin] HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information

Note: the current version of the following document is available here:
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/
docDisplay?docId=emr_na-c04626732

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c04626732
Version: 1

HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information

NOTICE: The information in this Security Bulletin should be acted upon as
soon as possible.

Release Date: 2015-04-01
Last Updated: 2015-04-01

Potential Security Impact: Disclosure of information

Source: Hewlett-Packard Company, HP Software Security Response Team

VULNERABILITY SUMMARY
A potential security vulnerability has been identified with HP Intelligent
Provisioning that could result in disclosure of information

[security bulletin] HPSBMU03304 rev.1 - HP Insight Control server deployment on Linux and Windows, Remote Disclosure of Information

Note: the current version of the following document is available here:
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/
docDisplay?docId=emr_na-c04624296

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c04624296
Version: 1

HPSBMU03304 rev.1 - HP Insight Control server deployment on Linux and
Windows, Remote Disclosure of Information

NOTICE: The information in this Security Bulletin should be acted upon as
soon as possible.

Release Date: 2015-04-01
Last Updated: 2015-04-01

Potential Security Impact: Remote disclosure of information

Source: Hewlett-Packard Company, HP Software Security Response Team

[security bulletin] HPSBST03298 rev.2 - HP XP Service Processor Software for Windows, Multiple Vulnerabilities

Note: the current version of the following document is available here:
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/
docDisplay?docId=emr_na-c04600552

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c04600552
Version: 2

HPSBST03298 rev.2 - HP XP Service Processor Software for Windows, Multiple
Vulnerabilities

NOTICE: The information in this Security Bulletin should be acted upon as
soon as possible.

Release Date: 2015-03-13
Last Updated: 2015-04-01

Potential Security Impact: Multiple vulnerabilities

Source: Hewlett-Packard Company, HP Software Security Response Team

VULNERABILITY SUMMARY
Potential security vulnerabilities have been identified with HP XP Service
Processor Software for Windows. These

vulnerabilities could be exploited resulting in a variety of outcomes.

SECUREDROP >= 0.3 - Possible Backdoor & Privileges Escalation by Unauth User

\_   _____/|  | |  | |__|______/  |_|__| ____   \__    ___/  _  \  \_____  \
 |    __)_ |  | |  | |  \____ \   __\  |/ ___\    |    | /  /_\  \  /   |   \
 |        \|  |_|  |_|  |  |_> >  | |  \  \___    |    |/    |    \/    |    \
/_______  /|____/____/__|   __/|__| |__|\___  >   |____|\____|__  /\_______  /
        \/              |__|                \/                  \/         \/
___________                       ___
\__    ___/___ _____    _____    / _ \_/\  ___  ______  ______  ___
  |    |_/ __ \\__  \  /     \   \/ \___/  \  \/  /\  \/  /\  \/  /
  |    |\  ___/ / __ \|  Y Y  \             >    <  >    <  >    <
  |____| \___  >____  /__|_|  /            /__/\_ \/__/\_ \/__/\_ \
             \/     \/      \/                   \/      \/      \/

~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#
~#~#~#~#~#~#
                SECURITY VULNERABILITY - SECUREDROP >= 0.3
        Possible Backdoor & Privileges Escalation by Unauth User
               2015-04-01 by ~~~ Elliptic TAO Team ~~~
~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#~#

Hello fellow Internet users,

On this great day, where all the tech companies and fresh startups make
fun of you by presenting you incredible new products and try to fool you
into believing in something that is not there.

We will not.

We tell nothing but the truth, we are, in a way, whistleblowers.