Multiple implementations of LDAP Directory Server vulnerable to buffer overflow

Overview

A buffer overflow in some implementations of the LDAP protocol may allow a remote unauthenticated attacker to execute arbitrary code.

Description

The Lightweight Directory Access Protocol (LDAP) is a protocol for accessing network based directories. A lack of bounds checking in some implementations of the LDAP protocol may allow a buffer used to generate error messages to overflow. If a remote unauthenticated attacker supplies a LDAP server with a specially crafted request, they may be able to trigger the buffer overflow to compromise the vulnerable server.

---

Impact

A remote unauthenticated attacker may be able to execute arbitrary code on a vulnerable LDAP server with the privileges of the compromised LDAP process, or crash the LDAP process resulting in a denial-of-service condition.

---

Solution

Users who suspect they are vulnerable are encouraged to check with their vendor to determine the appropriate action to take.

---

Limit Access

Block or restrict access to the LDAP service (389/tcp or 636/tcp) on affected systems from untrusted networks such as the Internet. Sites, particularly those who are not able to apply the appropriate patches, are encouraged to consider implementing this workaround. Note that this change may break some desired functionality depending on particular site configuration details. As a general rule and a matter of good security practice, the CERT/CC recommends blocking access to all services that are not explicitly required.

---

Vendor Information

258905

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Hewlett-Packard Company __ Affected

Notified: December 09, 2004 Updated: January 11, 2005

Status

Affected

Vendor Statement

HP has released a Security Bulletin to address this issue. For further information, please refer to the following URL:

<http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBUX01105&gt;

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Hitachi __ Affected

Notified: December 10, 2004 Updated: January 13, 2005

Status

Affected

Vendor Statement

Hitachi Directory Server Version 2 is vulnerable to this issue.
More details are available at

<http://www.hitachi-support.com/security_e/vuls_e/HS05-001_e/index-e.html&gt;

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Netscape Communications Corporation __ Affected

Updated: January 11, 2005

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

A statement provided by Red Hat concerning Netscape Directory Server version 6.21 and earlier can be found at the following URL:

<https://www.kb.cert.org/vulcatalog/id/SSTT-67PTDF&gt;

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Red Hat Inc. __ Affected

Notified: December 09, 2004 Updated: January 10, 2005

Status

Affected

Vendor Statement

Vendor Statement: Red Hat, Inc:

Netscape Directory Server version 6.21 and earlier are vulnerable to this issue. In December 2004 Red Hat aquired the Netscape Directory Server product from America Online, Inc. Patches are available by contacting the Red Hat Security Response Team by email at [email protected]. More details are available at

<http://rhn.redhat.com/errata/RHSA-2005-030.html&gt;

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Apple Computer Inc. __ Not Affected

Notified: December 09, 2004 Updated: January 14, 2005

Status

Not Affected

Vendor Statement

Mac OS X v10.2.x and Mac OS X Server v10.2.x or earlier are not affected by this issue as they do not contain the vulnerable versions of the LDAP server.

Mac OS X v10.3.x and Mac OS X Server v10.3.x are not affected by this issue in their supported configurations.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Cybozu __ Not Affected

Notified: December 10, 2004 Updated: January 13, 2005

Status

Not Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Juniper Networks __ Not Affected

Notified: December 09, 2004 Updated: January 11, 2005

Status

Not Affected

Vendor Statement

Juniper Networks products are not susceptible to this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Lotus Software __ Not Affected

Notified: December 09, 2004 Updated: December 16, 2004

Status

Not Affected

Vendor Statement

The IBM Lotus Domino server is not vulnerable to this LDAP issue.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

NEC Corporation __ Not Affected

Notified: December 10, 2004 Updated: January 13, 2005

Status

Not Affected

Vendor Statement

Related information is published on _<http://www.sw.nec.co.jp/psirt/bnin2005.html#1&gt;_

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

OpenLDAP __ Not Affected

Notified: December 09, 2004 Updated: January 11, 2005

Status

Not Affected

Vendor Statement

The OpenLDAP Project has evaluated

* OpenLDAP Software 2.2.17 (current "stable" version) and
* OpenLDAP Software 2.2.19 (current "release" version)

as well as development and release engineering sources, as distributed by the OpenLDAP Project. We found that long attribute names in LDAP request PDUs do not cause a buffer overflow, nor even lead to unexpected behavior (regardless of whether the long attribute name is defined or not in the subschema).

The OpenLDAP Project did not evaluate older versions of OpenLDAP Software. As these versions are no longer maintained by the OpenLDAP Project, the OpenLDAP Project recommends (irregardless of this issue) that users of these versions consider upgrading to a current version.

The OpenLDAP Project also did not evaluate any 3rd party software, including software based upon (in any fashion) OpenLDAP Software.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Quality __ Not Affected

Notified: December 10, 2004 Updated: January 13, 2005

Status

Not Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

SuSE Inc. __ Not Affected

Notified: December 09, 2004 Updated: January 11, 2005

Status

Not Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Conectiva __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Cray Inc. __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Debian __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

EMC Corporation __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Engarde __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

F5 Networks __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

FreeBSD __ Unknown

Notified: December 09, 2004 Updated: December 16, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Fujitsu __ Unknown

Notified: December 10, 2004 Updated: January 13, 2005

Status

Unknown

Vendor Statement

Related information will be published on <http://software.fujitsu.com/jp/security/vuls/vuls.html#1BF8D7AA_ldap&gt;

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

IBM __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Immunix __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Ingrian Networks __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

MandrakeSoft __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Microsoft Corporation __ Unknown

Notified: December 09, 2004 Updated: January 05, 2005

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

MontaVista Software __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

NETBSD __ Unknown

Notified: December 09, 2004 Updated: December 16, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Nokia __ Unknown

Notified: December 09, 2004 Updated: December 16, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Nortel Networks __ Unknown

Notified: December 14, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Novell __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Openwall GNU/*/Linux __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Oracle Corporation __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

PADL Software __ Unknown

Notified: December 14, 2004 Updated: December 17, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

QUALCOMM __ Unknown

Notified: December 14, 2004 Updated: December 17, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

SCO __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

SGI __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Sony Corporation __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Teamware __ Unknown

Notified: December 14, 2004 Updated: December 17, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Trend Micro __ Unknown

Notified: December 10, 2004 Updated: January 13, 2005

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Unisys __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

Wind River Systems Inc. __ Unknown

Notified: December 09, 2004 Updated: December 15, 2004

Status

Unknown

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23258905 Feedback>).

View all 41 vendors __View less vendors __

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://www.ietf.org/rfc/rfc2251.txt&gt;
• <http://cve.mitre.org/cgi-bin/cvename.cgi?name=2004-1236&gt;
• [Additional information is available in Japanese at:](<Additional information is available in Japanese at:>)
• <http://jvn.jp/jp/JVN%231BF8D7AA.html&gt;

Acknowledgements

Thanks to HIRT (Hitachi Incident Response Team).

This document was written by Damon Morda, Stacey Stewart and Jeffrey Gennari.

Other Information

CVE IDs:	CVE-2004-1236
Severity Metric:	7.88 Date Public: