Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2008:0110
HistoryFeb 22, 2008 - 1:54 p.m.

compat, openldap security update

2008-02-2213:54:12
CentOS Project
lists.centos.org
44

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.6%

JSON

CentOS Errata and Security Advisory CESA-2008:0110

OpenLDAP is an open source suite of Lightweight Directory Access Protocol
(LDAP) applications and development tools. LDAP is a set of protocols for
accessing directory services.

These updated openldap packages fix a flaw in the way the OpenLDAP slapd
daemon handled modify and modrdn requests with NOOP control on objects
stored in a Berkeley DB (BDB) storage backend. An authenticated attacker
with permission to perform modify or modrdn operations on such LDAP objects
could cause slapd to crash. (CVE-2007-6698, CVE-2008-0658)

Users of openldap should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-February/076851.html
https://lists.centos.org/pipermail/centos-announce/2008-February/076852.html
https://lists.centos.org/pipermail/centos-announce/2008-February/076854.html
https://lists.centos.org/pipermail/centos-announce/2008-February/076857.html
https://lists.centos.org/pipermail/centos-announce/2008-February/076864.html
https://lists.centos.org/pipermail/centos-announce/2008-February/076865.html

Affected packages:
compat-openldap
openldap
openldap-clients
openldap-devel
openldap-servers
openldap-servers-sql

Upstream details at:
https://access.redhat.com/errata/RHSA-2008:0110

OSVersionArchitecturePackageVersionFilename
CentOS4i386compat-openldap< 2.1.30-8.el4_6.4compat-openldap-2.1.30-8.el4_6.4.i386.rpm
CentOS4i386openldap< 2.2.13-8.el4_6.4openldap-2.2.13-8.el4_6.4.i386.rpm
CentOS4i386openldap-clients< 2.2.13-8.el4_6.4openldap-clients-2.2.13-8.el4_6.4.i386.rpm
CentOS4i386openldap-devel< 2.2.13-8.el4_6.4openldap-devel-2.2.13-8.el4_6.4.i386.rpm
CentOS4i386openldap-servers< 2.2.13-8.el4_6.4openldap-servers-2.2.13-8.el4_6.4.i386.rpm
CentOS4i386openldap-servers-sql< 2.2.13-8.el4_6.4openldap-servers-sql-2.2.13-8.el4_6.4.i386.rpm
CentOS4i386compat-openldap< 2.1.30-8.el4_6.4compat-openldap-2.1.30-8.el4_6.4.i386.rpm
CentOS4x86_64compat-openldap< 2.1.30-8.el4_6.4compat-openldap-2.1.30-8.el4_6.4.x86_64.rpm
CentOS4i386openldap< 2.2.13-8.el4_6.4openldap-2.2.13-8.el4_6.4.i386.rpm
CentOS4x86_64openldap< 2.2.13-8.el4_6.4openldap-2.2.13-8.el4_6.4.x86_64.rpm
Rows per page:
1-10 of 471

Related

openvas 33
nessus 16
ubuntucve 2
prion 2
fedora 4
securityvulns 2
cve 2
ubuntu 1
oraclelinux 1
redhat 1
debian 1
osv 1
exploitpack 1
exploitdb 2
altlinux 1
freebsd 1
gentoo 1
openvas
openvas
FreeBSD Ports: openldap-server
2008-09-04 00:00:00
CentOS Update for compat-openldap CESA-2008:0110 centos4 i386
2009-02-27 00:00:00
SLES9: Security update for OpenLDAP 2
2009-10-10 00:00:00
nessus
nessus
RHEL 4 / 5 : openldap (RHSA-2008:0110)
2008-02-25 00:00:00
SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12075)
2009-09-24 00:00:00
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : openldap2.2, openldap2.3 vulnerabilities (USN-584-1)
2008-03-07 00:00:00
ubuntucve
ubuntucve
CVE-2008-0658
2008-02-13 00:00:00
CVE-2007-6698
2008-02-01 00:00:00
prion
prion
Design/Logic Flaw
2008-02-13 21:00:00
Double free
2008-02-01 22:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: openldap-2.3.34-7.fc7
2008-02-13 05:15:42
[SECURITY] Fedora 7 Update: openldap-2.3.34-6.fc7
2008-02-07 20:54:16
[SECURITY] Fedora 8 Update: openldap-2.3.39-3.fc8
2008-02-13 05:11:01
securityvulns
securityvulns
OpenDAL DoS
2008-02-16 00:00:00
rPSA-2008-0059-1 openldap openldap-clients openldap-servers
2008-02-16 00:00:00
cve
cve
CVE-2008-0658
2008-02-13 21:00:00
CVE-2007-6698
2008-02-01 22:00:00
ubuntu
ubuntu
OpenLDAP vulnerabilities
2008-03-05 00:00:00
oraclelinux
oraclelinux
Moderate: openldap security update
2008-02-21 00:00:00
redhat
redhat
(RHSA-2008:0110) Moderate: openldap security update
2008-02-21 00:00:00
debian
debian
[SECURITY] [DSA 1541-1] New openldap2.3 packages fix denial of service
2008-04-08 21:50:58
osv
osv
openldap2.3
2008-04-08 00:00:00
exploitpack
exploitpack
OpenLDAP 2.3.39 - MODRDN Remote Denial of Service
2009-11-09 00:00:00
exploitdb
exploitdb
OpenLDAP 2.3.39 - MODRDN Remote Denial of Service
2009-11-09 00:00:00
OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability
2008-02-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package openldap2.4 version 2.3.41-alt1
2008-02-25 00:00:00
freebsd
freebsd
openldap -- modrdn Denial of Service vulnerability
2008-02-13 00:00:00
gentoo
gentoo
OpenLDAP: Denial of Service vulnerabilities
2008-03-19 00:00:00

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.007 Low

EPSS

Percentile

80.6%

JSON
Related for CESA-2008:0110
openvas33nessus16ubuntucve2prion2fedora4securityvulns2cve2ubuntu1oraclelinux1redhat1debian1osv1exploitpack1exploitdb2altlinux1freebsd1gentoo1