OpenLDAP vulnerabilities

2008-03-0500:00:00

ubuntu.com

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.9%

JSON

Releases

Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

openldap2.2 -
openldap2.3 -

Details

Jonathan Clarke discovered that the OpenLDAP slapd server did not
properly handle modify requests when using the Berkeley DB backend
and specifying the NOOP control. An authenticated user with modify
permissions could send a crafted modify request and cause a denial
of service via application crash. Ubuntu 7.10 is not affected by
this issue. (CVE-2007-6698)

Ralf Haferkamp discovered that the OpenLDAP slapd server did not
properly handle modrdn requests when using the Berkeley DB backend
and specifying the NOOP control. An authenticated user with modrdn
permissions could send a crafted modrdn request and possibly cause a
denial of service via application crash. (CVE-2007-6698)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchslapd< 2.3.35-1ubuntu0.2UNKNOWN
Ubuntu7.10noarchldap-utils< 2.3.35-1ubuntu0.2UNKNOWN
Ubuntu7.10noarchlibldap-2.3-0< 2.3.35-1ubuntu0.2UNKNOWN
Ubuntu7.04noarchslapd< 2.3.30-2ubuntu0.2UNKNOWN
Ubuntu7.04noarchldap-utils< 2.3.30-2ubuntu0.2UNKNOWN
Ubuntu7.04noarchlibldap-2.3-0< 2.3.30-2ubuntu0.2UNKNOWN
Ubuntu6.10noarchslapd< 2.2.26-5ubuntu3.3UNKNOWN
Ubuntu6.10noarchldap-utils< 2.2.26-5ubuntu3.3UNKNOWN
Ubuntu6.10noarchlibldap-2.2-7< 2.2.26-5ubuntu3.3UNKNOWN
Ubuntu6.06noarchslapd< 2.2.26-5ubuntu2.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.10	noarch	slapd	< 2.3.35-1ubuntu0.2	UNKNOWN
Ubuntu	7.10	noarch	ldap-utils	< 2.3.35-1ubuntu0.2	UNKNOWN
Ubuntu	7.10	noarch	libldap-2.3-0	< 2.3.35-1ubuntu0.2	UNKNOWN
Ubuntu	7.04	noarch	slapd	< 2.3.30-2ubuntu0.2	UNKNOWN
Ubuntu	7.04	noarch	ldap-utils	< 2.3.30-2ubuntu0.2	UNKNOWN
Ubuntu	7.04	noarch	libldap-2.3-0	< 2.3.30-2ubuntu0.2	UNKNOWN
Ubuntu	6.10	noarch	slapd	< 2.2.26-5ubuntu3.3	UNKNOWN
Ubuntu	6.10	noarch	ldap-utils	< 2.2.26-5ubuntu3.3	UNKNOWN
Ubuntu	6.10	noarch	libldap-2.2-7	< 2.2.26-5ubuntu3.3	UNKNOWN
Ubuntu	6.06	noarch	slapd	< 2.2.26-5ubuntu2.6	UNKNOWN