DTSA-87-1 openldap2.3 - denial of service

Bulletin has no description...

VMware Workstation and Player: Multiple vulnerabilities

Background VMware Workstation is a virtual machine for developers and system administrators. VMware Player is a freeware virtualization software that can run guests produced by other VMware products. Description Multiple vulnerabilities have been discovered in several VMware products. Neel Mehta...

Fedora Core 6 : openldap-2.3.30-3.fc6 (2007-741)

Fri Nov 2 2007 Jan Safranek 2.3.30-3.fc6 - add ldconfig to devel post/postun bz240253 - do not create script in /tmp on startup bz188298 - start slupd for each replicated database bz210155 - fix security issues 359851 and 359861 Note that Tenable Network Security has extracted the preceding...

RHEL 4 : openldap (RHSA-2007:1038)

Updated openldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and...

compat, openldap security update

CentOS Errata and Security Advisory CESA-2007:1038 Updated openldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

Moderate: Red Hat Security Advisory: openldap security and enhancement update

Updated openldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and...

openldap slapd DoS via objectClasses attribute

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent...

[SECURITY] Fedora Core 6 Update: openldap-2.3.30-3.fc6

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Fedora 8 : openldap-2.3.39-1.fc8 (2007-2796)

Fri Nov 2 2007 Jan Safranek 2.3.39-1.fc8 - new upstream version, fixing few security flaws 362991 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 8 Update: openldap-2.3.39-1.fc8

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

RHEL 5 : openldap (RHSA-2007:1037)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1037 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. A flaw was found in the way...

Mandrake Linux Security Advisory : openldap (MDKSA-2007:215)

A flaw in the way OpenLDAP's slapd daemon handled malformed objectClasses LDAP attributes was discovered. A local or remote attacker could create an LDAP request that could cause a denial of service by crashing slapd. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C...

openldap slapd DoS via objectClasses attribute

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent...

Important: Red Hat Security Advisory: openldap security and enhancement update

Updated openldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications an...

tcp_wrappers: hosts_ctl() does not handle hostnames specified in /etc/hosts.{allow,deny} correctly

REJECTED CVE A flaw was found in the tcpwrappers related to the handling of hostnames specified in the host access rules in /etc/hosts.allow and /etc/hosts.deny. This issue affects applications like net-snmp snmpd and OpenLDAP daemons that uses the hostsctl tcpwrappers interface function. The fla...

FreeBSD : openldap -- multiple remote denial of service vulnerabilities (db449245-870d-11dc-a3ec-001921ab2fa4)

BugTraq reports : OpenLDAP is prone to multiple remote denial-of-service vulnerabilities because of an incorrect NULL-termination issue and a double-free issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

OpenLDAP多个远程拒绝服务漏洞

OpenLDAP是一款开放源代码的LDAP协议实现。 OpenLDAP存在NULL终止符处理问题和两次释放问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，导致服务程序崩溃。 -在objectClasses的属性标准化操作中，slapd存在一个两次释放问题，可导致应用程序崩溃。 -slapd以代理缓存服务器运行时，存在NULL终止符处理漏洞可导致符号11 segfault发生。 OpenLDAP OpenLDAP 2.3.27 OpenLDAP OpenLDAP 2.3.25 OpenLDAP OpenLDAP 2.3.6 + S.u.S.E. Linux Personal 9.1...

Double free

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent...

Null pointer dereference

slapo-pcache overlays/pcache.c in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service segmentation fault v...

CVE-2007-5708

slapo-pcache overlays/pcache.c in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service segmentation fault v...