Squid WCCP Message Receive Buffer Overflow (CVE-2005-0211)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. An attacker can exploit this vulnerability to terminate the vulnerable product, creating a denial of service condition, or it can be exploited for code. A remote vulnerability was found in Squid web proxy/cache processes...

VMSA-2011-0001 : VMware ESX third-party updates for Service Console packages glibc, sudo, and openldap

a. Service Console update for glibc The service console packages glibc, glibc-common, and nscd are each updated to version 2.5-34.4908.vmw. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-3847 and CVE-2010-3856 to the issues addressed in this update...

SuSE 10 Security Update : openLDAP (ZYPP Patch Number 7074)

Several issues have been fixed in OpenLDAP: - specially crafted MODRDN operations can crash the OpenLDAP server. CVE-2010-0211 / CVE-2010-0212 - syncrepl might loose deletes in refreshAndPersist mode - replicating from a SLES11 master to a SLES10 slave can cause inconsistencies - libldap hangs wi...

Fedora Update for openldap FEDORA-2010-11343

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE9 Security Update : openLDAP2 (YOU Patch Number 12624)

This update fixes two denial of service bugs in the openldap server while handling MODRDN operations. CVE-2010-0211 and CVE-2010-0212 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Fedora 13 : openldap-2.4.21-10.fc13 (2010-11343)

Tue Jul 20 2010 Jan Vcelak - 2.4.21-10 - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free 605448 - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference 605452 - obsolete configuration file moved to /usr/share/openldap-servers 612602 - Thu Jul 1...

Debian: Security Advisory (DSA-2077-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-965-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-965-1: OpenLDAP vulnerabilities

Using the Codenomicon LDAPv3 test suite, Ilkka Mattila and Tuomas Salomäki discovered that the slapmodrdn2mods function in modrdn.c in OpenLDAP does not check the return value from a call to the smrnormalize function. A remote attacker could use specially crafted modrdn requests to crash the slap...

Debian DSA-2077-1 : openldap - several vulnerabilities

Two remote vulnerabilities have been discovered in OpenLDAP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0211 The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, whi...

Mandriva Update for openldap MDVSA-2010:142 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2010:142 openldap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] [DSA 2077-1] New openldap packages fix potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2077-1 [email protected] http://www.debian.org/security/ Florian Weimer July 29, 2010 http://www.debian.org/security/faq -...

CVE-2010-0211

CVE-2010-0211 affects OpenLDAP 2.4.22 slapd: the function slap_modrdn2mods does not check the smr_normalize return value, allowing a remote attacker to trigger a denial of service (segmentation fault) and potentially execute code via a modrdn request containing invalid UTF-8, which leads to freei...

openSUSE Security Update : openldap2 (openSUSE-SU-2010:0427-1)

The following issues have been fixed in OpenLDAP: specially crafted MODRDN operations can crash the OpenLDAP server CVE-2010-0211 and CVE-2010-0212. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

RedHat Update for openldap RHSA-2010:0542-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0542-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for openldap RHSA-2010:0543-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0543-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for openldap RHSA-2010:0542-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0542-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS 5 : openldap (CESA-2010:0542)

Updated openldap packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

CentOS 4 : openldap (CESA-2010:0543)

Updated openldap packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

OpenLDAP 'modrdn' Request Multiple Vulnerabilities

OpenLDAP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...