EUVD-2002-1362

Malware in sbrugna...

Ubuntu 14.04 LTS : OpenLDAP vulnerabilities (USN-7698-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7698-1 advisory. It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use this issue to cause...

USN-7698-1: OpenLDAP vulnerabilities

It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. CVE-2020-36221 It was discovered that OpenLDAP incorrectly handled saslAuthzTo processing. A...

Advisory ROSA-SA-2025-2550

Software: openldap 2.4.44 OS: rosa-server79 packageevrstring: openldap-2.4.44-25.0.2.res7 CVE-ID: CVE-2019-13057 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in OpenLDAP allows a server administrator with rootDN privileges to request authorization as another user from a different...

Vulnerabilities fixed in OpenLDAP

Several vulnerabilities have been fixed in OpenLDAP. The vulnerabilities allow an unauthenticated malicious person with network access to the OpenLDAP server is able to cause a denial-of-service on the OpenLDAP service. Exploit code is publicly available for both vulnerabilities. The operation of...

Ubuntu Update for openldap, openldap2.3 vulnerabilities USN-1100-1

Ubuntu Update for Linux kernel vulnerabilities USN-1100-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11001.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for openldap, openldap2.3 vulnerabilities USN-1100-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu Update for OpenLDAP vulnerabilities USN-965-1

Ubuntu Update for Linux kernel vulnerabilities USN-965-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9651.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for OpenLDAP vulnerabilities USN-965-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu Update for openldap vulnerabilities USN-551-1

Ubuntu Update for Linux kernel vulnerabilities USN-551-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5511.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openldap vulnerabilities USN-551-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CentOS Update for compat-openldap CESA-2008:0110 centos4 i386

Check for the Version of compat-openldap OpenVAS Vulnerability Test CentOS Update for compat-openldap CESA-2008:0110 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

RHEL 4 : openldap and nss_ldap (RHSA-2005:767)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:767 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. The nssldap module is an...

login_ldap security announcement

Sebastian Stark from Directory Applications for Advanced Security and Information Management http://www.daasi.de has found a serious issue with loginldap, affecting all versions. loginldap is a BSD Authentication module for authenticating users off an LDAP server, and runs on OpenBSD and BSD/OS. ...

CVE-2002-1379

OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges...

CVE-2002-1378

Multiple buffer overflows in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allow remote attackers to execute arbitrary code via 1 long -t or -r parameters to slurpd, 2 a malicious ldapfilter.conf file that is not properly handled by getfilter functions, 3 a malicious ldaptemplates.conf that causes an...

Multiple versions of OpenLDAP are vulnerable to denial-of-service attacks

Overview Multiple versions of OpenLDAP contain vulnerabilities that may allow denial-of-service attacks. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product, the CERT/CC encourages you to follow the...