PT-2026-48432

A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclass definitions, the oc superior SUP field length is omitted from buffer size calculations in read schema dse and schema oc to string, but the field is still written via strcat. An attacker with Directory...