CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

Design/Logic Flaw

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

DEBIAN-CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

CVE-2009-3767

CVE-2009-3767 affects OpenLDAP 2.4.x and related TLS implementations when OpenSSL is used, due to improper handling of a null character in the domain CN of an X.509 certificate, enabling MITM spoofing of SSL servers via a CA-issued certificate. Connected records indicate this CVE is tied to OpenL...

CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

CVE-2009-3767

libraries/libldap/tlso.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...

SLES10: Security update for the OpenLDAP client

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-client openldap2-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-meta openldap2-back-perl openldap2-client openldap2-devel More details may also be found by searching for the SuSE Enterprise Server...

SLES10: Security update for the OpenLDAP client

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-client openldap2-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES9: Security update for OpenLDAP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2 openldap2-back-perl openldap2-client openldap2-devel openldap2-back-ldap openldap2-back-monitor More details may also be found ...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-ldap openldap2-back-meta openldap2-back-monitor openldap2-back-perl openldap2-client openldap2-devel For more information, please...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-ldap openldap2-back-meta openldap2-back-monitor openldap2-back-perl openldap2-client openldap2-devel For more information, please...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...

SLES9: Security update for OpenLDAP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2 openldap2-back-perl openldap2-client openldap2-devel openldap2-back-ldap openldap2-back-monitor More details may also be found ...

SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12222)

This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...

SuSE9 Security Update : openldap2-client (YOU Patch Number 11307)

OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Server to crash. CVE-2006-5779 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12075)

Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command. CVE-2007-6698 / CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...