2401 matches found
[SECURITY] Fedora 9 Update: openldap-2.4.8-6.fc9
OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...
[SECURITY] Fedora 8 Update: openldap-2.3.39-4.fc8
OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...
CVE-2008-2952
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...
Code injection
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...
CVE-2008-2952
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...
CVE-2008-2952
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...
DEBIAN-CVE-2008-2952
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...
CVE-2008-2952
OpenLDAP vulnerability CVE-2008-2952 affects liblber in OpenLDAP 2.2.4–2.4.10. A remote, unauthenticated attacker can trigger a denial of service by sending crafted ASN.1 BER datagrams that cause an assertion error in io.c, leading to slapd termination. Several distributions patched this issue (e...
CVE-2008-2952
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...
CVE-2008-2952
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...
OpenLDAP BER解码远程拒绝服务漏洞
BUGTRAQ ID: 30013 OpenLDAP是一款开放源代码的轻量级目录访问协议（LDAP）实现。 OpenLDAP的libraries/liblber/io.c文件中的bergetnext函数没有正确地解码ASN.1 BER网络数据报，如果数据报的单元（标签 + 长度 + 内容）包含有 4字节长的多字节标签 4字节长的多字节大小 则解码后的整个大小为BerElement结构缓冲区加1个字节，这导致函数返回说明仍需更多数据，但读指针仍指向缓冲区末尾，这是不允许的。之后的函数调用会出现失败： assert 0 ; / ber structure is messed up ?/...
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service source: https://www.securityfocus.com/bid/30013/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users by crashing affected servers. OpenLDAP 2.3.41 is...
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
source: https://www.securityfocus.com/bid/30013/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users by crashing affected servers. OpenLDAP 2.3.41 is vulnerable to this issue; earlier versions back to approximatel...
RHEL 5 : bind (RHSA-2008:0300)
"Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementatio...
Moderate: Red Hat Security Advisory: bind security, bug fix, and enhancement update
Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation...
SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 4989)
Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command. CVE-2007-6698 / CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Debian Security Advisory DSA 1541-1 (openldap2.3)
The remote host is missing an update to openldap2.3 announced via advisory DSA 1541-1. OpenVAS Vulnerability Test $Id: deb15411.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1541-1 openldap2.3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1541-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1541-1] New openldap2.3 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1541-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 08, 2008 http://www.debian.org/security/faq -...