FreeBSD : openldap -- slapd acl selfwrite Security Issue (ae7124ff-547c-11db-8f1a-000a48049292)

Howard Chu reports : An ACL of the form 'access to dn.subtree='ou=groups, dc=example,dc=com' attr=member by selfwrite' is intended to only allow users to add/delete their own DN to the target attribute. Currently it allows any DNs to be modified. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

CVE-2006-4600

CVE-2006-4600 affects OpenLDAP (OpenLDAP earlier than 2.3.25) where users with selfwrite ACL privileges could modify the distinguished name (DN) of any entry. The connected advisories (RHSA-2007:0310/0430, ELSA-2007-0310/0430, etc.) indicate a flaw in how selfwrite access is handled and describe ...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

OpenLDAP privilege escalation

User with 'selfwrite' ACL parameter can modify any attributes...

[SA21721] OpenLDAP slapd "selfwrite" Security Issue

TITLE: OpenLDAP slapd "selfwrite" Security Issue SECUNIA ADVISORY ID: SA21721 VERIFY ADVISORY: http://secunia.com/advisories/21721/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: OpenLDAP 2.3.x http://secunia.com/product/5943/ DESCRIPTION: Howard Chu has reported a...

Preemptive Protection agains Apple Open Directory Denial of Service Vulnerability

The OpenLDAP software allows LDAP-aware programs on a network to get information from a server. Apple uses OpenLDAP as a part of their Open Directory product. An error in the implementation of OpenLDAP may allow a remote attacker with the ability to send a malformed LDAP request to cause Open...

CentOS 4 : openldap / nss_ldap (CESA-2005:767)

Updated openldap and nssldap packages that correct a potential password disclosure issue and possible authentication vulnerability are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

CentOS 3 : openldap / nss_ldap (CESA-2005:751)

Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...

Apple Mac OS X Open Directory server vulnerable to DoS via an invalid LDAP request

Overview Apple has reported a vulnerability in their version of OpenLDAP that is included in Apple Mac OS X and Mac OS X Server versions 10.4 to 10.4.6. If successfully exploited, this vulnerability would allow an attacker to create a denial-of-service condition. Description OpenLDAP is a popular...

Mac OS X 10.4.x < 10.4.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.7. Mac OS X 10.4.7 contains several security fixes for the following programs : - AFP server - ImageIO - launched - OpenLDAP C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc";...

CVE-2006-1470

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service crash via an invalid LDAP request that triggers an assert error...

Design/Logic Flaw

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service crash via an invalid LDAP request that triggers an assert error...

CVE-2006-1470

OpenLDAP in Apple Mac OS X 10.4.x up to 10.4.6 is affected by a DoS due to an assertion error triggered by a malformed LDAP request. The vulnerability enables a remote attacker to crash the Open Directory/OpenLDAP server. Affected products are Apple Mac OS X/macOS Open Directory deployments using...

CVE-2006-1470

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service crash via an invalid LDAP request that triggers an assert error...

USN-305-1: OpenLDAP vulnerability

When processing overly long host names in OpenLDAP's slurpd replication server, a buffer overflow caused slurpd to crash. If an attacker manages to inject a specially crafted host name into slurpd, this might also be exploited to execute arbitrary code with slurpd's privileges; however, since...

Apple Mac OSX 10.4.x - OpenLDAP Denial of Service

Apple Mac OSX 10.4.x - OpenLDAP Denial of Service source: https://www.securityfocus.com/bid/18728/info Mac OS X Open Directory Server is prone to a denial-of-service vulnerability because it fails to handle exceptional conditions. An attacker can exploit this issue to cause a crash in the LDAP...

OpenLDAP slurpd buffer overflow

Buffer overflow on oversized hostname during replication...

[USN-305-1] OpenLDAP vulnerability

=========================================================== Ubuntu Security Notice USN-305-1 June 27, 2006 openldap2, openldap2.2 vulnerability CVE-2006-2754 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10...