Gentoo Security Advisory GLSA 200711-33 (nss_ldap)

The remote host is missing updates announced in advisory GLSA 200711-33. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nss_ldap security and bug fix update

253-5 - build with strict-aliasing disabled, because pamldap breaks strict-aliasing rules without it tools 253-4 - block SIGPIPE in the atfork handler, so that it doesnt trip up when attempting to drop a connection to the server 448833 253-3 - add patch to make netgroup enumeration fail due to la...

RHEL 4 : nss_ldap (RHSA-2008:0715)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

Low: Red Hat Security Advisory: nss_ldap security and bug fix update

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

nss_ldap security and bug fix update

253-12 - rebuild 253-11 - backport changes to group parsing from version 254 to fix heap corruption when parsing nested groups 444031 253-10 - remove unnecessary nssldap linkage to libnsl part of 427370 253-9 - rebuild 253-8 - incorporate Tomas Janouseks fix to prevent re-use of connections acros...

RHEL 5 : nss_ldap (RHSA-2008:0389)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

Low: Red Hat Security Advisory: nss_ldap security and bug fix update

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

SuSE 10 Security Update : nss_ldap (ZYPP Patch Number 4781)

nssldap returned incorrect data under certain circumstances to the calling process. Some applications could therefore work with wrong user data. CVE-2007-5794 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc...

openSUSE 10 Security Update : nss_ldap (nss_ldap-4773)

nssldap returned incorrect data under certain circumstances to the calling process. Some applications could therefore work with wrong user data CVE-2007-5794. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

nss_ldap information leak

Race conditions in multithread applications...

[ GLSA 200711-33 ] nss_ldap: Information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200711-33 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

GLSA-200711-33 : nss_ldap: Information disclosure

The remote host is affected by the vulnerability described in GLSA-200711-33 nssldap: Information disclosure Josh Burley reported that nssldap does not properly handle the LDAP connections due to a race condition that can be triggered by multi-threaded applications using nssldap, which might lead...

nss_ldap: Information disclosure

Background nssldap is a Name Service Switch module which allows 'passwd', 'group' and 'host' database information to be pulled from LDAP. Description Josh Burley reported that nssldap does not properly handle the LDAP connections due to a race condition that can be triggered by multi-threaded...

PADL Nss_ldap竞争条件漏洞

BUGTRAQ ID: 26452 CVECAN ID: CVE-2007-5794 nssldap模块可在AIX、Linux、Solaris等操作系统上提供LDAP名称服务交换服务。 如果应用程序链接到pthread并使用nssldap调用然后fork的话，这两个进程就会共享ldap连接，没有锁定机制。这可能导致通过共享的LDAP连接向进程返回错误数据。 这个漏洞的起因是当pthreadonce为非空就表示pthreadatfork也为非空这个假设是错误的。这两个变量之间没有联系，调用pthreadatfork对nssldap中的pthreadatfork值没有影响，反之亦然。 Pad...

Race condition

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

CVE-2007-5794

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

CVE-2007-5794

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

CVE-2007-5794

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

CVE-2007-5794

CVE-2007-5794 describes a race condition in the nss_ldap component (nss_ldap and pam_ldap) that can occur when applications are linked against pthreads and fork after an LDAP call, potentially causing user data to be returned to the wrong process. The issue originates with improper handling of LD...

CVE-2007-5794

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...