Oracle: Security Advisory (ELSA-2010-0198)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libldap-2.4-2 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The libldap-2.4-2-dbg package for the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2012-2668

libraries/libldap/tlsm.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive...

CVE-2012-2668

libraries/libldap/tlsm.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive...

Fedora 15 : openldap-2.4.24-2.fc15 (2011-3612)

Three security issues were fixed during the rebase! Changes not covered by bugs : - new: system resource limiting for slapd using ulimit - fix: possible NULL pointer dereference in NSS implementation OpenLDAP package was rebased to 2.4.24. Extension of API : - libldap adds: ldapdestroy ldapdup...

SuSE 10 Security Update : openLDAP (ZYPP Patch Number 7074)

Several issues have been fixed in OpenLDAP: - specially crafted MODRDN operations can crash the OpenLDAP server. CVE-2010-0211 / CVE-2010-0212 - syncrepl might loose deletes in refreshAndPersist mode - replicating from a SLES11 master to a SLES10 slave can cause inconsistencies - libldap hangs wi...

openSUSE Security Update : libldap-2_4-2 (openSUSE-SU-2010:0547-1)

The following issues have been fixed in OpenLDAP: specially crafted MODRDN operations can crash the OpenLDAP server CVE-2010-0211 and CVE-2010-0212. also fixed were following bugs : - adding a 'postalAdress' Attribute with an embedded NUL value caused the LDAP server to terminate with an assertio...

openSUSE Security Update : libldap-2_4-2 (openSUSE-SU-2010:0546-1)

The following issues have been fixed in OpenLDAP: specially crafted MODRDN operations can crash the OpenLDAP server CVE-2010-0211 and CVE-2010-0212. also fixed was following bug : - Delete Operations happening during the 'Refresh' phase of 'refreshAndPersist' replication failed to replicate under...

Solaris 10 (sparc) : 120036-07

SunOS 5.10: libldap patch. Date this patch was last updated by Sun : Aug/31/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Ubuntu 6.06 LTS : openldap2.2 vulnerability (USN-858-1)

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracte...

SLES11: Security update for OpenLDAP2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libldap-24-2 openldap2 openldap2-back-meta openldap2-client More details may also be found by searching for the SuSE Enterprise Server 11 patch database...

openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : libldap-2_4-2 (libldap-2_4-2-1301)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : libldap-2_4-2 (libldap-2_4-2-1301)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

SuSE 10 Security Update : the OpenLDAP client (ZYPP Patch Number 5704)

The last security update for openldap2-client introduced a problem in libldap that could cause LDAP clients to prematurely truncate search results. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 138061-04

SunOS 5.10x86: libldap patch. Date this patch was last updated by Sun : Sep/05/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 10 (sparc) : 138060-04

SunOS 5.10: libldap patch. Date this patch was last updated by Sun : Sep/05/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

[OpenPKG-SA-2006.033] OpenPKG Security Advisory (openldap)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory OpenPKG GmbH http://openpkg.org/security/ http://openpkg.com OpenPKG-SA-2006.033 2006-11-10 Package: openldap Vulnerability: denial of service OpenPKG Specific: no Affected Series: Affected Packages: Corrected Packages:...

Security fix for the ALT Linux 10 package apache2 version 2.0.52-alt3

Dec. 27, 2004 Sviatoslav Sviridov 2.0.52-alt3 - updated alt-configure patch to check for available libldap and link with libldap - applied patches: + httpd-2.0.52-sslauth.patch + httpd-2.0.52-SSLCipherSuite-bypass-CAN-2004-0885.diff + httpd-2.0.52-memory-consumption-DoS-CAN-2004-0942.diff +...