Debian DSA-1650-1 : openldap2.3 - denial of service

Cameron Hotchkies discovered that the OpenLDAP server slapd, a free implementation of the Lightweight Directory Access Protocol, could be crashed by sending malformed ASN1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1650-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 12, 2008 http://www.debian.org/security/faq -...

[USN-634-1] OpenLDAP vulnerability

=========================================================== Ubuntu Security Notice USN-634-1 August 01, 2008 openldap2.2, openldap2.3 vulnerability CVE-2008-2952 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...

DSquare Exploit Pack: D2SEC_K9WEB

Name| d2seck9web ---|--- CVE| CVE-2007-2952 Exploit Pack| D2ExploitPack Description| Blue Coat K9 Web Protection 'Referer' Header Stack Overflow Vulnerability Notes|...

CVE-2007-2952

Blue Coat K9 Web Protection 3.2.44 (Filter 3.2.32) has concrete stack-based buffer overflow vulnerabilities in k9filter.exe. An attacker can trigger remote code execution: (1) via a crafted long Referer header to the Web Protection Administration interface, and (2) via an HTTP response with an ov...

Mac OS X Multiple Vulnerabilities (Security Update 2008-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-005 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if...

openldap security update

2.3.27-8.4 - fix CVE-2008-2952 453639...

Fedora 9 : openldap-2.4.8-6.fc9 (2008-6062)

This update fixes CVE-2008-2952 - remote unauthenticated slapd DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : openldap-2.3.39-4.fc8 (2008-6029)

This update fixes CVE-2008-2952 - remote unauthenticated slapd DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Security fix for the ALT Linux 5 package openldap2.4 version 2.3.41-alt2

July 2, 2008 Dmitry Lebkov 2.3.41-alt2 - fix for CVE-2008-2952 patch from OpenLDAP CVS - set more specific BuildRequires: + libdb4.4-devel...

BELL-CVE-2008-2952 CVE-2008-2952 does not affect BellSoft software

Bulletin has no description...

CVE-2008-2952

OpenLDAP vulnerability CVE-2008-2952 affects liblber in OpenLDAP 2.2.4–2.4.10. A remote, unauthenticated attacker can trigger a denial of service by sending crafted ASN.1 BER datagrams that cause an assertion error in io.c, leading to slapd termination. Several distributions patched this issue (e...

CVE-2008-2952

creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32000...

CVE-2006-2952

The CVE-2006-2952 entry describes a directory traversal vulnerability in Net Portal Dynamic System (NPDS) versions 5.10 and earlier. The flaw allows remote attackers to read arbitrary files by crafting a .. (dot dot) path and a trailing null (%00) byte in specific parameters: (1) Default_Theme in...

CVE-2006-2952

Directory traversal vulnerability in Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the 1 DefaultTheme parameter to header.php or 2 ModPath parameter to modules/cluster-paradise/cluster-E.php...

CVE-2005-2952

The CVE-2005-2952 entry concerns a directory traversal vulnerability in Subscribe Me Pro (versions up to 2.044.09P and earlier). The issue arises from a dot-dot (.. ) path traversal in the l parameter of s.pl, allowing remote attackers to read arbitrary files. Affects Subscribe Me Pro 2.044.09P a...