OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service

OpenLDAP 2.4.x - modrdn NULL OldDN Remote Denial of Service source: https://www.securityfocus.com/bid/46831/info OpenLDAP is prone to a remote denial-of-service vulnerability that affects the 'modify relative distinguished name' modrdn command. Attackers can exploit this issue to deny service to...

SuSE 11 Security Update : openLDAP (SAT Patch Number 2552)

Several issues have been fixed in OpenLDAP : - specially crafted MODRDN operations can crash the OpenLDAP server. CVE-2010-0211 / CVE-2010-0212 - syncrepl might loose deletes in refreshAndPersist mode - DoS when handling 0-bytes %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

OpenLDAP Modrdn RDN NULL String Denial of Service (CVE-2010-0212)

OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol LDAP service. On a default installation, the OpenLDAP server uses TCP port 389 for communication. A remote code execution vulnerability has been reported in OpenLDAP. The vulnerability is due to a memory...

OpenLDAP Modrdn RDN UTF-8 String Code Execution (CVE-2010-0211)

OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol LDAP service. On a default installation, the OpenLDAP server uses TCP port 389 for communication. A remote code execution vulnerability has been reported in OpenLDAP. The vulnerability is due to a memory...

SuSE 10 Security Update : openLDAP (ZYPP Patch Number 7074)

Several issues have been fixed in OpenLDAP: - specially crafted MODRDN operations can crash the OpenLDAP server. CVE-2010-0211 / CVE-2010-0212 - syncrepl might loose deletes in refreshAndPersist mode - replicating from a SLES11 master to a SLES10 slave can cause inconsistencies - libldap hangs wi...

openSUSE Security Update : libldap-2_4-2 (openSUSE-SU-2010:0546-1)

The following issues have been fixed in OpenLDAP: specially crafted MODRDN operations can crash the OpenLDAP server CVE-2010-0211 and CVE-2010-0212. also fixed was following bug : - Delete Operations happening during the 'Refresh' phase of 'refreshAndPersist' replication failed to replicate under...

SuSE9 Security Update : openLDAP2 (YOU Patch Number 12624)

This update fixes two denial of service bugs in the openldap server while handling MODRDN operations. CVE-2010-0211 and CVE-2010-0212 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : openldap, openldap2.2, openldap2.3 vulnerabilities (USN-965-1)

Using the Codenomicon LDAPv3 test suite, Ilkka Mattila and Tuomas Salomaki discovered that the slapmodrdn2mods function in modrdn.c in OpenLDAP does not check the return value from a call to the smrnormalize function. A remote attacker could use specially crafted modrdn requests to crash the slap...

USN-965-1: OpenLDAP vulnerabilities

Using the Codenomicon LDAPv3 test suite, Ilkka Mattila and Tuomas Salomäki discovered that the slapmodrdn2mods function in modrdn.c in OpenLDAP does not check the return value from a call to the smrnormalize function. A remote attacker could use specially crafted modrdn requests to crash the slap...

[SECURITY] [DSA 2077-1] New openldap packages fix potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2077-1 [email protected] http://www.debian.org/security/ Florian Weimer July 29, 2010 http://www.debian.org/security/faq -...

DEBIAN-CVE-2010-0211

The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, which allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a modrdn call with an RDN string containing...

CVE-2010-0211

The slapmodrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smrnormalize function, which allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a modrdn call with an RDN string containing...

CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

Null pointer dereference

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

CVE-2010-0212

OpenLDAP 2.4.22 allows remote attackers to cause a denial of service crash via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smrnormalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schemainit.c, as...

CVE-2010-0212

CVE-2010-0212 affects OpenLDAP 2.4.22 (and related OpenLDAP deployments in several distros). The vulnerability arises from a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in IA5StringNorma...

openSUSE Security Update : openldap2 (openSUSE-SU-2010:0427-1)

The following issues have been fixed in OpenLDAP: specially crafted MODRDN operations can crash the OpenLDAP server CVE-2010-0211 and CVE-2010-0212. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

RedHat Update for openldap RHSA-2010:0542-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0542-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...