SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-ldap openldap2-back-meta openldap2-back-monitor openldap2-back-perl openldap2-client openldap2-devel For more information, please...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-ldap openldap2-back-meta openldap2-back-monitor openldap2-back-perl openldap2-client openldap2-devel For more information, please...

SLES9: Security update for OpenLDAP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2 openldap2-back-perl openldap2-client openldap2-devel openldap2-back-ldap openldap2-back-monitor More details may also be found ...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...

SLES9: Security update for OpenLDAP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2 openldap2-back-perl openldap2-client openldap2-devel openldap2-back-ldap openldap2-back-monitor More details may also be found ...

SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12075)

Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command. CVE-2007-6698 / CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : openldap2-client (YOU Patch Number 11307)

OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Server to crash. CVE-2006-5779 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12222)

This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...

OpenLDAP -- incorrect handling of NULL in certificate Common Name

Jan Lieskovsky reports: OpenLDAP does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authori...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:116)

Multiple vulnerabilities has been found and corrected in gnutls : lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service application crash and possibly have unspecified other impact via a...

Code injection

gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related to lack of time checks in the gnutlsx509verifycertificate function...

CVE-2009-1417

gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related to lack of time checks in the gnutlsx509verifycertificate function...

CVE-2009-1417

gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related to lack of time checks in the gnutlsx509verifycertificate function...

Mandriva Linux Security Advisory : openldap (MDVSA-2008:144)

A denial of service vulnerability was discovered in the way the OpenLDAP slapd daemon processed certain network messages. An unauthenticated remote attacker could send a specially crafted request that would crash the slapd daemon CVE-2008-2952. The updated packages have been patched to correct th...

Mandriva Linux Security Advisory : openldap (MDVSA-2008:058)

A vulnerability was found in slapo-pcache in slapd of OpenLDAP prior to 2.3.39 when running as a proxy-caching server. It would allocate memory using a malloc variant rather than calloc, which prevented an array from being properly initialized and could possibly allow attackers to cause a denial ...

Mandriva Update for openldap MDVSA-2008:058 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2008:058 openldap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openldap MDVSA-2008:058 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2008:058 openldap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openldap MDKSA-2007:215 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDKSA-2007:215 openldap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for openldap MDKSA-2007:215 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDKSA-2007:215 openldap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...