nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer...

CVE-2013-0288

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer...

CVE-2013-0288

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer...

CVE-2013-0288

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer...

CVE-2013-0288

The CVE-2013-0288 issue affects nss-pam-ldapd (nslcd) prior to 0.7.18 and 0.8.x prior to 0.8.11. A name lookup performed when many file descriptors are open can trigger a FD_SET misuse that causes a stack-based buffer overflow, leading to denial of service (application crash) and potentially remo...

CVE-2013-0288: Improper Restriction of Operations within the Bounds of a Memory Buffer

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer...

Fedora 17 : nss-pam-ldapd-0.7.16-3.fc17 (2013-2754)

Fixes: CVE-2013-0288 nss-pam-ldapd: FDSET array index error, leading to stack-based buffer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 18 : nspr-4.9.5-2.fc18 / nss-3.14.3-1.fc18 / nss-softokn-3.14.3-1.fc18 / etc (2013-2929)

Update nss to nss-3.14.3 This is a patch release to address CVE-2013-1620. Detailed descriptions of the bugs fixes on nss-3.14.3 can be found in the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS3.14.3releasenotes Note that Tenable Network Security has extracted the...

[SECURITY] Fedora 17 Update: nss-pam-ldapd-0.7.16-3.fc17

The nss-pam-ldapd daemon, nslcd, uses a directory server to look up name service information users, groups, etc. on behalf of a lightweight nsswitch module...

[SECURITY] Fedora 18 Update: nss-softokn-3.14.3-1.fc18

Network Security Services Softoken Cryptographic Module...

[SECURITY] Fedora 18 Update: nss-util-3.14.3-1.fc18

Utilities for Network Security Services and the Softoken module...

ipa security, bug fix and enhancement update

3.0.0-25.el6 - Filter generated winbind dependencies so the right version of samba can be installed. 905594 3.0.0-24.el6 - Add certmonger condrestart to server post scriptlet 903758 - Make certmonger a pre Requires 903758 - Add selinux-policy to Requirespre to avoid post scriptlet AVCs 903758 - S...

nss-pam-ldapd fd_set overflow

FDSET structure overflow...

[SECURITY] [DSA 2628-1] nss-pam-ldapd security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2628-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2013 http://www.debian.org/security/faq -...

FreeBSD : nss-pam-ldapd -- file descriptor buffer overflow (58c15292-7b61-11e2-95da-001e8c1a8a0e)

Garth Mollett reports : A file descriptor overflow issue in the use of FDSET in nss-pam-ldapd can lead to a stack-based buffer overflow. An attacker could, under some circumstances, use this flaw to cause a process that has the NSS or PAM module loaded to crash or potentially execute arbitrary...

Debian DSA-2628-1 : nss-pam-ldapd - buffer overflow

Garth Mollett discovered that a file descriptor overflow issue in the use of FDSET in nss-pam-ldapd, which provides NSS and PAM modules for using LDAP as a naming service, can lead to a stack-based buffer overflow. An attacker could, under some circumstances, use this flaw to cause a process that...

[SECURITY] [DSA 2628-1] nss-pam-ldapd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2628-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2013 http://www.debian.org/security/faq -...

DSA-2628-1 nss-pam-ldapd - buffer overflow

Bulletin has no description...

nss-pam-ldapd -- file descriptor buffer overflow

Garth Mollett reports: A file descriptor overflow issue in the use of FDSET in nss-pam-ldapd can lead to a stack-based buffer overflow. An attacker could, under some circumstances, use this flaw to cause a process that has the NSS or PAM module loaded to crash or potentially execute arbitrary cod...

[SECURITY] Fedora 17 Update: sssd-1.8.6-1.fc17

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...