Debian: Security Advisory (DSA-227)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : openldap2-client (ZYPP Patch Number 2291)

OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Server to crash. CVE-2006-5779 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : openldap2 (ZYPP Patch Number 1916)

This fixes a bug in the Access Control Processing that allowed users with 'selfwrite' access to an attribute to modify arbitrary values of that attribute, instead of just allowing them to add/delete their own DN to/from that attribute. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : openldap2 (ZYPP Patch Number 4679)

This update fixes multiple flaws that could cause slapd to crash. CVE-2007-5707 / CVE-2007-5708 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29536;...

openSUSE 10 Security Update : openldap2 (openldap2-4677)

This update fixes multiple flaws that could cause slapd to crash CVE-2007-5707, CVE-2007-5708. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openldap2-4677. The text description of this plug...

openSUSE 10 Security Update : openldap2-client (openldap2-client-2282)

OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Server to crash CVE-2006-5779. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE 10 Security Update : openldap2 (openldap2-1917)

This fixes a bug in the Access Control Processing that allowed users with 'selfwrite' access to an attribute to modify arbitrary values of that attribute, instead of just allowing them to add/delete their own DN to/from that attribute. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SA:2006:072: openldap2-client

The remote host is missing the patch for the advisory SUSE-SA:2006:072 openldap2-client. OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Serv...

Ubuntu 4.10 / 5.04 : openldap2, libpam-ldap, libnss-ldap vulnerabilities (USN-152-1)

Andrea Barisani discovered a flaw in the SSL handling of pam-ldap and libnss-ldap. When a client connected to a slave LDAP server using SSL, the slave server did not use SSL as well when contacting the LDAP master server. This caused passwords and other confident information to be transmitted...

Debian DSA-227-1 : openldap2 - buffer overflows and other bugs

The SuSE Security Team reviewed critical parts of openldap2, an implementation of the Lightweight Directory Access Protocol LDAP version 2 and 3, and found several buffer overflows and other bugs remote attackers could exploit to gain access on systems running vulnerable LDAP servers. In addition...

CVE-2002-1508

slapd in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests...

CVE-2002-1508

CVE-2002-1508 affects OpenLDAP2 (OpenLDAP 2) where the slapd service on version 2.2.0 and earlier is vulnerable to a race condition that can allow a local user to overwrite arbitrary files during the creation of a log file for rejected replication requests. The vulnerability is rooted in how the ...

DSA-227 openldap2 - buffer overflows and other bugs

Bulletin has no description...

Buffer overflows in OpenLDAP2

Few serious buffer overflows...

SuSE Security Announcement: OpenLDAP2 (SuSE-SA:2002:047)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: OpenLDAP2 Announcement-ID: SuSE-SA:2002:047 Date: Fri Dec 6 11:11:11 MET 2002 Affected products: 7.1, 7.2, 7.3, 8.0, SuSE eMail Server III, 3.1, SuSE Linux Connectivity Server, SuSE Linux Enterprise Server 7, SuSE Linux Office...