CVE-2006-5779

OpenLDAP before 2.3.29 is vulnerable to a denial-of-service due to an assertion failure triggered by LDAP BIND requests with long authcid names. The bug lies in libldap’s handling of the authcid string during Bind Requests, allowing remote attackers to crash the daemon. Affected releases are Open...

CVE-2006-5779

OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service daemon crash via LDAP BIND requests with long authcid names, which triggers an assertion failure...

OpenLDAP 2.2.29 Remote Denial of Service Exploit (meta)

No description provided by source. vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of th...

OpenLDAP SASL authcid Name BIND Request DoS

The remote host appears to be running OpenLDAP, an open source LDAP directory implementation. The version of OpenLDAP installed on the remote host fails to handle malformed SASL bind requests. An unauthenticated attacker can leverage this issue to crash the LDAP server on the affected host...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of the following License. The Pack with...

OpenLDAP 2.2.29 Remote Denial of Service Exploit (meta)

Exploit for linux platform in category dos / poc ======================================================= OpenLDAP 2.2.29 Remote Denial of Service Exploit meta ======================================================= vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...

OpenLDAP slapd "selfwrite"绕过安全限制漏洞

OpenLDAP是一款开放源代码的轻量级目录访问协议LDAP实现。 OpenLDAP在处理访问控制列表时存在错误，远程攻击者可能利用此漏洞绕过安全限制。 以下类型的ACL： access to dn.subtree="ou=groups,dc=example,dc=com" attr=member by selfwrite 应该仅允许用户对目标属性添加/删除自己的DN，但拥有selfwrite访问权限的用户确可以修改属性的任意值，允许攻击者绕过安全限制，获得非授权访问。 OpenLDAP OpenLDAP 2.3/HEAD 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

FreeBSD : openldap -- slapd acl selfwrite Security Issue (ae7124ff-547c-11db-8f1a-000a48049292)

Howard Chu reports : An ACL of the form 'access to dn.subtree='ou=groups, dc=example,dc=com' attr=member by selfwrite' is intended to only allow users to add/delete their own DN to the target attribute. Currently it allows any DNs to be modified. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

CVE-2006-4600

CVE-2006-4600 affects OpenLDAP (OpenLDAP earlier than 2.3.25) where users with selfwrite ACL privileges could modify the distinguished name (DN) of any entry. The connected advisories (RHSA-2007:0310/0430, ELSA-2007-0310/0430, etc.) indicate a flaw in how selfwrite access is handled and describe ...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

OpenLDAP privilege escalation

User with 'selfwrite' ACL parameter can modify any attributes...

[SA21721] OpenLDAP slapd "selfwrite" Security Issue

TITLE: OpenLDAP slapd "selfwrite" Security Issue SECUNIA ADVISORY ID: SA21721 VERIFY ADVISORY: http://secunia.com/advisories/21721/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: OpenLDAP 2.3.x http://secunia.com/product/5943/ DESCRIPTION: Howard Chu has reported a...

Preemptive Protection agains Apple Open Directory Denial of Service Vulnerability

The OpenLDAP software allows LDAP-aware programs on a network to get information from a server. Apple uses OpenLDAP as a part of their Open Directory product. An error in the implementation of OpenLDAP may allow a remote attacker with the ability to send a malformed LDAP request to cause Open...

CentOS 4 : openldap / nss_ldap (CESA-2005:767)

Updated openldap and nssldap packages that correct a potential password disclosure issue and possible authentication vulnerability are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

CentOS 3 : openldap / nss_ldap (CESA-2005:751)

Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...

Mac OS X 10.4.x < 10.4.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.7. Mac OS X 10.4.7 contains several security fixes for the following programs : - AFP server - ImageIO - launched - OpenLDAP C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc";...

Apple Mac OS X Open Directory server vulnerable to DoS via an invalid LDAP request

Overview Apple has reported a vulnerability in their version of OpenLDAP that is included in Apple Mac OS X and Mac OS X Server versions 10.4 to 10.4.6. If successfully exploited, this vulnerability would allow an attacker to create a denial-of-service condition. Description OpenLDAP is a popular...