> From: Securify Bulletins [mailto:bulletins (at) Securify (dot) com [email concealed]]
> Sent: Friday, 13 June, 2008 12:44
> To: bugtraq (at) securityfocus (dot) com [email concealed]; full-disclosure (at) lists.grok.org (dot) uk [email concealed]
>
> IV. WORKAROUNDS:
>
> Block TCP ports 389 and 3268 to your Active Directory
> server from untrusted sources.
AD may also be listening on 636 for LDAP-over-SSL.
--
Michael Wojcik
Principal Software Systems Developer, Micro Focus
> Sent: Friday, 13 June, 2008 12:44
> To: bugtraq (at) securityfocus (dot) com [email concealed]; full-disclosure (at) lists.grok.org (dot) uk [email concealed]
>
> IV. WORKAROUNDS:
>
> Block TCP ports 389 and 3268 to your Active Directory
> server from untrusted sources.
AD may also be listening on 636 for LDAP-over-SSL.
--
Michael Wojcik
Principal Software Systems Developer, Micro Focus
[ reply ]