CentOS 4 / 5 : openldap (CESA-2008:0583)

Updated openldap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP...

RHEL 4 / 5 : openldap (RHSA-2008:0583)

Updated openldap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP...

compat, openldap security update

CentOS Errata and Security Advisory CESA-2008:0583 Updated openldap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of...

Important: Red Hat Security Advisory: openldap security update

Updated openldap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP...

OpenLDAP denial-of-service flaw in ASN.1 decoder

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

openldap security update

2.3.27-8.4 - fix CVE-2008-2952 453639...

Fedora 9 : openldap-2.4.8-6.fc9 (2008-6062)

This update fixes CVE-2008-2952 - remote unauthenticated slapd DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : openldap-2.3.39-4.fc8 (2008-6029)

This update fixes CVE-2008-2952 - remote unauthenticated slapd DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 9 Update: openldap-2.4.8-6.fc9

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

[SECURITY] Fedora 8 Update: openldap-2.3.39-4.fc8

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

DEBIAN-CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

Code injection

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2952

OpenLDAP vulnerability CVE-2008-2952 affects liblber in OpenLDAP 2.2.4–2.4.10. A remote, unauthenticated attacker can trigger a denial of service by sending crafted ASN.1 BER datagrams that cause an assertion error in io.c, leading to slapd termination. Several distributions patched this issue (e...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

OpenLDAP BER解码远程拒绝服务漏洞

BUGTRAQ ID: 30013 OpenLDAP是一款开放源代码的轻量级目录访问协议（LDAP）实现。 OpenLDAP的libraries/liblber/io.c文件中的bergetnext函数没有正确地解码ASN.1 BER网络数据报，如果数据报的单元（标签 + 长度 + 内容）包含有 4字节长的多字节标签 4字节长的多字节大小 则解码后的整个大小为BerElement结构缓冲区加1个字节，这导致函数返回说明仍需更多数据，但读指针仍指向缓冲区末尾，这是不允许的。之后的函数调用会出现失败： assert 0 ; / ber structure is messed up ?/...

OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service

OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service source: https://www.securityfocus.com/bid/30013/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users by crashing affected servers. OpenLDAP 2.3.41 is...