Lucene search
FreeBSDABAD20BF-C1B4-11E3-A5AC-001B21614864HistoryAug 07, 2009 - 12:00 a.m.
OpenLDAP -- incorrect handling of NULL in certificate Common Name
2009-08-0700:00:00
vuxml.freebsd.org
15
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.4%
Jan Lieskovsky reports:
OpenLDAP does not properly handle a β\0β character in a domain name
in the subjectβs Common Name (CN) field of an X.509 certificate,
which allows man-in-the-middle attackers to spoof arbitrary SSL
servers via a crafted certificate issued by a legitimate
Certification Authority
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | openldap24-client | <Β 2.4.18 | UNKNOWN |
| FreeBSD | any | noarch | linux-f10-openldap | <Β 2.4.18 | UNKNOWN |
Related
nessus
nessus
openvas
openvas
Ubuntu USN-858-1 (openldap2.2)
2009-11-17 00:00:00
Fedora Update for openldap FEDORA-2010-0752
2010-03-05 00:00:00
Oracle: Security Advisory (ELSA-2010-0198)
2015-10-06 00:00:00
securityvulns
securityvulns
OpenLDAP certificate spoofing
2009-11-13 00:00:00
[USN-858-1] OpenLDAP vulnerability
2009-11-13 00:00:00
seebug
seebug
OpenLDAP CA SSLθ―δΉ¦ιͺθ―ζΌζ΄
2009-10-27 00:00:00
debian
debian
ubuntu
ubuntu
OpenLDAP vulnerability
2009-11-12 00:00:00
redhat
redhat
(RHSA-2010:0198) Moderate: openldap security and bug fix update
2010-03-30 00:00:00
(RHSA-2010:0543) Moderate: openldap security update
2010-07-20 00:00:00
oraclelinux
oraclelinux
openldap security and bug fix update
2010-04-05 00:00:00
openldap security update
2010-07-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2009-3767 affecting package openssl 1.1.1g-6
2021-08-11 06:39:26
CVE-2009-3767 affecting package openldap 2.4.50-1
2021-04-06 23:50:10
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:44:17
fedora
fedora
[SECURITY] Fedora 11 Update: openldap-2.4.15-7.fc11
2010-03-02 01:03:33
ubuntucve
ubuntucve
CVE-2009-3767
2009-10-23 00:00:00
prion
prion
Design/Logic Flaw
2009-10-23 19:30:00
centos
centos
compat, openldap security update
2010-07-21 19:15:25
debiancve
debiancve
CVE-2009-3767
2009-10-23 19:30:00
cve
cve
CVE-2009-3767
2009-10-23 19:30:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
gentoo
gentoo
OpenLDAP: Multiple vulnerabilities
2014-06-30 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.4%
Related for ABAD20BF-C1B4-11E3-A5AC-001B21614864