GLSA-200606-17 : OpenLDAP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200606-17 OpenLDAP: Buffer overflow slurpd contains a buffer overflow when reading very long hostnames from the status file. Impact : By injecting an overly long hostname in the status file, an attacker could possibly cause the...

OpenLDAP: Buffer overflow

Background OpenLDAP is a suite of LDAP-related applications and development tools. It includes slapd the standalone LDAP server, slurpd the standalone LDAP replication server, various LDAP libraries, utilities and example clients. Description slurpd contains a buffer overflow when reading very lo...

openldap -- slapd acl selfwrite Security Issue

Howard Chu reports: An ACL of the form 'access to dn.subtree="ou=groups, dc=example,dc=com" attr=member by selfwrite' is intended to only allow users to add/delete their own DN to the target attribute. Currently it allows any DNs to be modified...

Mandrake Linux Security Advisory : openldap (MDKSA-2006:096)

A stack-based buffer overflow in st.c in slurpd for OpenLDAP might allow attackers to execute arbitrary code via a long hostname. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2006-2754

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...

CVE-2006-2754

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...

Stack overflow

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...

CVE-2006-2754

OpenLDAP slurpd is affected by a stack-based buffer overflow in st.c when processing overly long hostnames, allowing arbitrary code execution. The vulnerability is in OpenLDAP versions prior to 2.3.22. Documents from Gentoo/SUSE advisories confirm the fixed version as 2.3.22 or newer. Remediation...

CVE-2006-2754

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...

[SECURITY] [DSA 1042-1] New Cyrus SASL packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1042-1 [email protected] http://www.debian.org/security/ Martin Schulze April 25th, 2006 http://www.debian.org/security/faq -...

[Full-disclosure] [MU-200604-01] Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service MU-200604-01 April 7, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: cyrus-sasl-2.1.18 Product Overview: SASL Simple Authentication Security Layer is an Internet...

CVE-2005-4442

Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH...

CVE-2005-4442

CVE-2005-4442 describes an untrusted search path vulnerability in Gentoo’s OpenLDAP before 2.2.28-r3, where a malicious shared object placed in the Portage temporary build directory (RUNPATH) could be loaded by a binary, enabling local privilege escalation for portage group users. Connected advis...

CVE-2005-4442

Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH...

GLSA-200512-07 : OpenLDAP, Gauche: RUNPATH issues

The remote host is affected by the vulnerability described in GLSA-200512-07 OpenLDAP, Gauche: RUNPATH issues Gentoo packaging for OpenLDAP and Gauche may introduce insecure paths into the list of directories that are searched for libraries at runtime. Impact : A local attacker, who is a member o...

OpenLDAP, Gauche: RUNPATH issues

Background OpenLDAP is a suite of LDAP-related application and development tools. Gauche is an R5RS Scheme interpreter. Description Gentoo packaging for OpenLDAP and Gauche may introduce insecure paths into the list of directories that are searched for libraries at runtime. Impact A local attacke...

Fedora Core 4 : openldap-2.2.29-1.FC4 (2005-992)

This is an experimental upgrade of OpenLDAP to 2.2.29 for FC4. Before I push it to final, I need some confirmation that upgrading to it will not break existing configurations. If I don't hear any objections, I should push it to final in a week or so. Note that Tenable Network Security has extract...

RHEL 4 : openldap and nss_ldap (RHSA-2005:767)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:767 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. The nssldap module is an...

RHEL 2.1 / 3 : openldap and nss_ldap (RHSA-2005:751)

Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...

xloadimage security update

CentOS Errata and Security Advisory CESA-2005:802 Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LD...