CVE-2007-5708

slapo-pcache overlays/pcache.c in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service segmentation fault v...

CVE-2007-5707

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent...

CVE-2007-5707

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent...

CVE-2007-5708

slapo-pcache overlays/pcache.c in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service segmentation fault v...

CVE-2007-5707

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent...

CVE-2007-5707

CVE-2007-5707 affects OpenLDAP’s slapd prior to 2.3.39, where crafted LDAP requests with malformed objectClasses can crash slapd (DoS). Remediation referenced in advisories is upgrading to OpenLDAP 2.3.39 or newer (RHSA-2007:1038, related vendor advisories). OpenVAS/Nessus entries corroborate Ope...

CVE-2007-5708

CVE-2007-5708 affects OpenLDAP’s slapd, specifically the slapo-pcache module (overlays/pcache.c). When OpenLDAP runs as a proxy‑caching server, it allocates memory with a malloc variant instead of calloc, which can prevent an array from being properly initialized and may lead to a denial of servi...

PT-2007-1002 · Openldap +1 · Openldap +1

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.3.39 OpenLDAP version 2.3.27 Description: The issue allows remote attackers to cause a denial of service slapd crash via an LDAP request with a malformed objectClasses attribute. This can lead to disruption of...

openldap -- multiple remote denial of service vulnerabilities

BugTraq reports: OpenLDAP is prone to multiple remote denial-of-service vulnerabilities because of an incorrect NULL-termination issue and a double-free issue...

Low: openldap security and bug-fix update

2.0.27-23 - Include the -ppc64 patch to fix a ppc64-specific build failure. - Put back smpmflags...

CentOS 3 : openldap (CESA-2007:0430)

A updated openldap packages that fix a security flaw and a memory leak bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protoc...

RHEL 3 : openldap (RHSA-2007:0430)

A updated openldap packages that fix a security flaw and a memory leak bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protoc...

openldap security update

CentOS Errata and Security Advisory CESA-2007:0430 A updated openldap packages that fix a security flaw and a memory leak bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open sourc...

security flaw

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

Low: openldap security update

2.3.13-7.4E - include the -selfwrite patch to close Resolves: rhbz205826: CVE-2006-4600 openldap improper selfwrite access...

compat, gdm, openldap security update

CentOS Errata and Security Advisory CESA-2007:0310 A updated openldap packages that fix a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

RHEL 4 : openldap (RHSA-2007:0310)

A updated openldap packages that fix a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and...

security flaw

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

Low: Red Hat Security Advisory: openldap security update

A updated openldap packages that fix a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and...

SUSE-SA:2006:072: openldap2-client

The remote host is missing the patch for the advisory SUSE-SA:2006:072 openldap2-client. OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Serv...