OpenLDAP <= 2.4.3 (KBIND) Remote Buffer Overflow Exploit

No description provided by source. / openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse [email protected] Shoutouts to LSD for their l33t asm code and to all 0dd people...

OpenLDAP <= 2.3.41 BER Decoding Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30013/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users by crashing affected servers. OpenLDAP 2.3.41 is vulnerable to this issue;...

GLSA-201406-36 : OpenLDAP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-36 OpenLDAP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenLDAP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker might employ a specially crafted...

OpenLDAP: Multiple vulnerabilities

Background OpenLDAP is an LDAP suite of application and development tools. Description Multiple vulnerabilities have been discovered in OpenLDAP. Please review the CVE identifiers referenced below for details. Impact A remote attacker might employ a specially crafted certificate to conduct...

OpenLDAP rwm Overlay Denial of Service - ver 2 (CVE-2013-4449)

A denial of service vulnerability has been reported in OpenLDAP. The vulnerability is due to an error in reference counting in the rwm overlay. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the vulnerable server...

FreeBSD : OpenLDAP -- incorrect handling of NULL in certificate Common Name (abad20bf-c1b4-11e3-a5ac-001b21614864)

Jan Lieskovsky reports : OpenLDAP does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification...

Cisco Unified Communications Manager拒绝服务漏洞

CVE ID:CVE-2013-4449 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager所绑定使用的OpenLDAP存在安全漏洞，允许攻击者通过查询目录和随即从服务器上解绑，使服务程序崩溃，造成拒绝服务攻击。 0 Cisco Unified Communications Manager 目前没有详细解决方案： http://www.cisco.com/security...

[ MDVSA-2014:026 ] openldap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:026 http://www.mandriva.com/en/support/security/ Package : openldap Date : February 12, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and...

OpenLDAP DoS

Resources exhaustion...

Fedora Update for openldap FEDORA-2014-2967

Check for the Version of openldap OpenVAS Vulnerability Test Fedora Update for openldap FEDORA-2014-2967 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openldap FEDORA-2014-2967

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: openldap-2.4.39-2.fc19

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Fedora 19 : openldap-2.4.39-2.fc19 (2014-2967)

CVE-2013-4449: segfault on certain queries with rwm overlay 1060851 Update to 2.4.39 1067818 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Amazon Linux AMI : openldap (ALAS-2014-294)

The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is being used by...

Medium: openldap

Issue Overview: The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the session context while it is...

RedHat Update for openldap RHSA-2014:0206-01

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2014:0206-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for compat-openldap CESA-2014:0206 centos5

Check for the Version of compat-openldap OpenVAS Vulnerability Test CentOS Update for compat-openldap CESA-2014:0206 centos5 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RHEL 5 : openldap (RHSA-2014:0206)

Updated openldap packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Linux 5 : openldap (ELSA-2014-0206)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0206 advisory. - fix: CVE-2013-4449 segfault on certain queries with rwm overlay 1064145 Tenable has extracted the preceding description block directly from the Oracle Linux...

CentOS Update for compat-openldap CESA-2014:0206 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...