Oracle Linux 6 : openldap (ELSA-2011-0347)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0347 advisory. - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 5 : openldap (ELSA-2008-0583)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0583 advisory. 2.3.27-8.4 - fix CVE-2008-2952 453639 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 6 : openldap (ELSA-2012-1151)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1151 advisory. - CVE-2012-2668 825875 cipher suite selection by name can be ignored default cipher suite is always selected Tenable has extracted the preceding description blo...

Oracle Linux 6 : openldap (ELSA-2012-0899)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0899 advisory. - security fix: CVE-2012-1164: assertion failure by processing search queries requesting only attributes for particular entry 813162 Tenable has extracted the...

Oracle Linux 5 : Moderate: / openldap (ELSA-2008-0110)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0110 advisory. 2.3.27-8.3 - better fix for CVE-2007-6698 431407, now it fixes also modrdn operations 2.3.27-8.2 - fix CVE-2007-6698 431407 Tenable has extracted the...

Oracle Linux 4 : openldap (ELSA-2007-0310)

From Red Hat Security Advisory 2007:0310 : A updated openldap packages that fix a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight...

Oracle Linux 5 : openldap (ELSA-2010-0542)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0542 advisory. 2.3.43-12.1 - fixed segfault issues in modrdn 606375 - added patch handling null char in TLS to compat package 606375, patch backported by Jan Vcelak...

Oracle Linux 3 : openldap (ELSA-2007-0430)

From Red Hat Security Advisory 2007:0430 : A updated openldap packages that fix a security flaw and a memory leak bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite ...

CentOS 4 : openldap (CESA-2007:1038)

Updated openldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and...

CentOS 4 : gdm / openldap (CESA-2007:0310)

A updated openldap packages that fix a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes several security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Mandriva Linux Security Advisory : openldap (MDVSA-2012:130)

A vulnerability was found and corrected in openldap : slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned CVE-2012-1164. The updated...

Mandrake Linux Security Advisory : openldap (MDKSA-2000:003)

OpenLDAP follows symbolic links when creating files. The default location for these files is /usr/tmp, which is a symlink to /tmp, which in turn is a world-writable directory. Local users can destroy the contents of any file on any mounted filesystem. %NASLMINLEVEL 70300 C Tenable Network Securit...

Fedora Update for openldap FEDORA-2012-10000

Check for the Version of openldap OpenVAS Vulnerability Test Fedora Update for openldap FEDORA-2012-10000 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openldap FEDORA-2012-10000

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

OpenLDAP DoS

assert on attrsOnly search request...

Low: openldap

Issue Overview: It was found that the OpenLDAP server daemon ignored olcTLSCipherSuite settings. This resulted in the default cipher suite always being used, which could lead to weaker than expected ciphers being accepted during Transport Layer Security TLS negotiation with OpenLDAP clients...

Mandriva Update for openldap MDVSA-2012:130 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2012:130 openldap Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openldap MDVSA-2012:130 (openldap)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 6 : openldap (CESA-2012:1151)

Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...