2401 matches found
CVE-2003-1201
ldbmbackexoppasswd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slappasswdparse function does not return LDAPSUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service segmentation fault...
PT-2003-1126 · Openldap · Openldap
Name of the Vulnerable Software and Affected Versions: OpenLDAP versions 2.1.12 and earlier Description: The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information availability. This is due to the ldbm back exop passwd function in th...
login_ldap security announcement
Sebastian Stark from Directory Applications for Advanced Security and Information Management http://www.daasi.de has found a serious issue with loginldap, affecting all versions. loginldap is a BSD Authentication module for authenticating users off an LDAP server, and runs on OpenBSD and BSD/OS. ...
CVE-2002-1508
slapd in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests...
Critical: Red Hat Security Advisory: : Updated openldap packages available
Updated openldap packages are available which fix a number of local and remote buffer overflows in libldap and the slapd and slurpd servers, and potential issues stemming from using user-specified LDAP configuration files. OpenLDAP is a suite of LDAP Lightweight Directory Access Protocol...
Critical: Red Hat Security Advisory: openldap security update
Updated OpenLDAP packages are available which fix a number of local and remote buffer overflows in libldap as well as the slapd and slurpd daemons. Additionally, potential issues stemming from using user-specified LDAP configuration files have been addressed. Updated 06 Feb 2003 Added fixed...
[SECURITY] [DSA 227-1] New openldap packages fix buffer overflows and remote exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 227-1 [email protected] http://www.debian.org/security/ Martin Schulze January, 13th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 227-1] New openldap packages fix buffer overflows and remote exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 227-1 [email protected] http://www.debian.org/security/ Martin Schulze January, 13th, 2003 http://www.debian.org/security/faq -...
CVE-2002-1378
Multiple buffer overflows in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allow remote attackers to execute arbitrary code via 1 long -t or -r parameters to slurpd, 2 a malicious ldapfilter.conf file that is not properly handled by getfilter functions, 3 a malicious ldaptemplates.conf that causes an...
CVE-2002-1379
OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges...
CVE-2002-1378
Multiple buffer overflows in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allow remote attackers to execute arbitrary code via 1 long -t or -r parameters to slurpd, 2 a malicious ldapfilter.conf file that is not properly handled by getfilter functions, 3 a malicious ldaptemplates.conf that causes an...
CVE-2002-1378
CVE-2002-1378 affects OpenLDAP 2 (OpenLDAP 2.2.0 and earlier). The issue comprises multiple buffer overflows in components such as slurpd (long -t/-r arguments), libldap (ldapfilter.conf, ldaptemplates.conf), slapd (ACL processing, and log filename construction for rejected replication requests)....
CVE-2002-1379
CVE-2002-1379 concerns OpenLDAP 2 (OpenLDAP 2) up to version 2.2.0 and earlier. The issue involves libldap reading the current user’s .ldaprc file when applications run with elevated privileges, enabling either remote or local attackers to execute arbitrary code. Multiple openldap2-related adviso...
CVE-2002-1379
OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges...
CVE-2001-0977
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service crash via an invalid Basic Encoding Rules BER length field...
CVE-2002-0045
The CVE affects OpenLDAP slapd prior to 2.0.20 (OpenLDAP 2.0.0–2.0.19; anonymous before 2.0.8) where a faulty ACL check allows a local/anonymous user to perform a replace operation with an empty value list. This bypasses access controls and can delete non-mandatory attributes that ACLs would norm...
CVE-2002-0045
slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs...
CVE-2001-0977
CVE-2001-0977 affects slapd in OpenLDAP, where OpenLDAP 1.x prior to 1.2.12 and 2.x prior to 2.0.8 are vulnerable. The issue is triggered by receiving LDAP BER length fields with invalid lengths, allowing remote attackers to cause a denial-of-service crash. Public advisories describe this as a re...
CVE-2002-0045
slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs...