Debian Security Advisory DSA 1541-1 (openldap2.3)

The remote host is missing an update to openldap2.3 announced via advisory DSA 1541-1. OpenVAS Vulnerability Test $Id: deb15411.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1541-1 openldap2.3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1541-1 : openldap2.3 - several vulnerabilities

Several remote vulnerabilities have been discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5707 Thomas Sesselmann discovered that slapd could be crashed by a...

DSA-1541-1 openldap2.3

Bulletin has no description...

USN-584-1: OpenLDAP vulnerabilities

Jonathan Clarke discovered that the OpenLDAP slapd server did not properly handle modify requests when using the Berkeley DB backend and specifying the NOOP control. An authenticated user with modify permissions could send a crafted modify request and cause a denial of service via application...

CentOS 4 / 5 : openldap (CESA-2008:0110)

Updated openldap packages that fix security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP applicatio...

Moderate: openldap security update

2.3.27-8.3 - better fix for CVE-2007-6698 431407, now it fixes also modrdn operations 2.3.27-8.2 - fix CVE-2007-6698 431407...

Fedora 7 : openldap-2.3.34-7.fc7 (2008-1616)

Fri Feb 8 2008 Jan Safranek 2.3.34-7 - fix CVE-2008-0658 432012 - Tue Feb 5 2008 Jan Safranek 2.3.34-6 - fix CVE-2007-6698 431409 - Mon Jan 14 2008 Jan Safranek 2.3.34-5 - fix default slurpd directory to /var/lib/ldap 424831 - Fri Nov 2 2007 Jan Safranek 2.3.34-4 - fix various security flaws...

CVE-2008-0658

slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service daemon crash via a modrdn operation with a NOOP LDAPXNOOPERATION control, a related issue to CVE-2007-6698...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability. CVE-2008-0658. Dos exploit for linux platform source: http://www.securityfocus.com/bid/27778/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users...

Fedora 7 : openldap-2.3.34-6.fc7 (2008-1307)

Tue Feb 5 2008 Jan Safranek 2.3.34-6 - fix CVE-2007-6698 431409 - Mon Jan 14 2008 Jan Safranek 2.3.34-5 - fix default slurpd directory to /var/lib/ldap 424831 - Fri Nov 2 2007 Jan Safranek 2.3.34-4 - fix various security flaws 360081 - Fri Jul 13 2007 Jan Safranek 2.3.34-3 - Fix initscript return...

CVE-2007-6698

OpenLDAP slapd with a Berkeley DB (BDB) backend is affected by CVE-2007-6698. A remote, authenticated user who can perform modify or modrdn operations can cause slapd to crash by sending a NOOP control marked as critical during those operations. The issue is tied to the handling of NOOP in modify...

CVE-2006-6698

The CVE-2006-6698 issue affects the GConf daemon (gconfd) in GConf 2.14.0. It creates temporary files in directories named after the user, even when GCONF_GLOBAL_LOCKS is not set. This enables a local attacker to pre-create the directories and cause a denial of service that blocks other users fro...