CVE-2013-4449

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

Design/Logic Flaw

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

CVE-2013-4449

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

CVE-2013-4449

OpenLDAP OpenLDAP rwm overlay vulnerability CVE-2013-4449 allows a remote attacker to crash slapd by unbinding immediately after a search, due to incorrect reference counting. Public disclosures confirm the affected versions (2.4.23, 2.4.36 and earlier) and describe a denial-of-service condition ...

CVE-2013-4449

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

CVE-2013-4449

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

UBUNTU-CVE-2013-4449

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

openldap security update

CentOS Errata and Security Advisory CESA-2014:0126 Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System...

Oracle Linux 6 : openldap (ELSA-2014-0126)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0126 advisory. 2.4.23-34.1 - fix: segfault on certain queries with rwm overlay 1058250 2.4.23-34 - fix: deadlock during SSLForceHandshake 996373 + revert...

CentOS 6 : openldap (CESA-2014:0126)

Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 6 : openldap (RHSA-2014:0126)

Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : openldap on SL6.x i386/x86_64 (20140203)

A denial of service flaw was found in the way the OpenLDAP server daemon slapd performed reference counting when using the rwm rewrite/remap overlay. A remote attacker able to query the OpenLDAP server could use this flaw to crash the server by immediately unbinding from the server after sending ...

Moderate: Red Hat Security Advisory: openldap security and bug fix update

Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openldap: segfault on certain queries with rwm overlay

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

openldap security and bug fix update

2.4.23-34.1 - fix: segfault on certain queries with rwm overlay 1058250 2.4.23-34 - fix: deadlock during SSLForceHandshake 996373 + revert nss-handshake-threadsafe.patch...

OpenLDAP rwm Overlay Denial of Service (CVE-2013-4449)

A denial of service vulnerability has been reported in OpenLDAP...

Apple Mac OS X OpenLDAP 'ldapsearch'命令安全漏洞(CVE-2013-5185)

BUGTRAQ ID: 63351 CVECAN ID: CVE-2013-5185 OS X（前称Mac OS X）是苹果公司为麦金塔电脑开发的专属操作系统的最新版本。 OS X 10.9之前版本的OpenLDAP里，ldapsearch命令行程序没有正确处理minssf配置设置，可使远程攻击者利用弱加密方式以进行网络嗅探，从而获取敏感信息。 0 Apple Mac OS X 10.9 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（msg00004）以及相应补丁: msg00004：APPLE-SA-2013-10-22-3 OS X Mavericks...

CVE-2013-5185

The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, which allows remote attackers to obtain sensitive information by leveraging unintended weak encryption and sniffing the network...

Design/Logic Flaw

The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, which allows remote attackers to obtain sensitive information by leveraging unintended weak encryption and sniffing the network...

CVE-2013-5185

CVE-2013-5185 affects Apple Mac OS X prior to 10.9, where the ldapsearch utility in OpenLDAP does not correctly process the minssf setting, enabling remote attackers to sniff network traffic and obtain sensitive data via weak encryption. Public references from NVD/Red Hat/OS X security notices co...