CVE-2011-1024: Undefined Security Weakness

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

CVE-2011-1081

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...

CVE-2011-1025

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...

RedHat Update for openldap RHSA-2011:0346-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2011:0346-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for openldap RHSA-2011:0346-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : openldap (RHSA-2011:0347)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0347 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. A flaw was found in the w...

RHEL 5 : openldap (RHSA-2011:0346)

Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openldap: forwarded bind failure messages cause success

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

openldap: rootpw not verified via slapd.conf when using the NDB backend

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name DN, which allows remote attackers to bypass intended access restrictions via an arbitrary password...

openldap: DoS when submitting special MODRDN request

modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...

Moderate: Red Hat Security Advisory: openldap security update

Updated openldap packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openldap: forwarded bind failure messages cause success

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

Moderate: Red Hat Security Advisory: openldap security and bug fix update

Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openldap security and bug fix update

2.3.43-12.7 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 2.3.43-12.6 - fix: slapd concurrent access to connections causes slapd to silently die 677611...

openldap security update

2.4.19-15.2 - fix: security - DoS when submitting special MODRDN request 680975 2.4.19-15.1 - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success - fix: CVE-2011-1025 rootpw is not verified for ndb backend...

PT-2011-1104

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.24 OpenLDAP versions 2.4.19 OpenLDAP version 2.4.35 and earlier Description The issue affects the confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be...

PT-2011-1103

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.24 OpenLDAP versions 2.4.19 OpenLDAP version 2.4.35 and earlier Description The issue affects the confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be...

PT-2011-1102

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.24 OpenLDAP versions 2.3.43 OpenLDAP versions 2.4.19 OpenLDAP-servers versions 2.3.43 OpenLDAP-servers versions 2.4.19 OpenLDAP-clients versions 2.3.43 OpenLDAP-clients versions 2.4.19 OpenLDAP-devel versions...

FreeBSD Ports: openldap-server

The remote host is missing an update to the system as announced in the referenced advisory. VID be3dfe33-410b-11e0-9e02-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID be3dfe33-410b-11e0-9e02-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...