Mandrake Linux Security Advisory : openldap (MDKSA-2002:013)

A problem exists in all versions of OpenLDAP from 2.0.0 through 2.0.19 where permissions are not properly checked using access control lists when a user tries to remove an attribute from an object in the directory by replacing it's values with an empty list. Schema checking is still enforced, so ...

SUSE-SA:2002:047: OpenLDAP2

The remote host is missing the patch for the advisory SUSE-SA:2002:047 OpenLDAP2. OpenLDAP is the Open Source implementation of the Lightweight Directory Access Protocol LDAP and is used in network environments for distributing certain information such as X.509 certificates or login information...

RHEL 2.1 : openldap (RHSA-2002:312)

Updated OpenLDAP packages are available which fix a number of local and remote buffer overflows in libldap as well as the slapd and slurpd daemons. Additionally, potential issues stemming from using user-specified LDAP configuration files have been addressed. Updated 06 Feb 2003 Added fixed...

CVE-2004-1997

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges...

kolab cleartext password

OpenLDAP passwowrd is stored in world-readable file as cleratext...

OpenLDAP DoS Vulnerability

Background OpenLDAP is a suite of LDAP-related application and development tools. It includes slapd the standalone LDAP server, slurpd the standalone LDAP replication server, and various LDAP libraries, utilities and example clients. Description A password extended operation password EXOP which...

Critical: Red Hat Security Advisory: : : : Updated openldap packages available for iSeries and pSeries

Updated openldap packages are available which fix a number of local and remote buffer overflows in libldap, and in the slapd and slurpd servers, as well as fixing potential issues stemming from using user-specified LDAP configuration files. OpenLDAP is a suite of LDAP Lightweight Directory Access...

CVE-2003-1201

ldbmbackexoppasswd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slappasswdparse function does not return LDAPSUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service segmentation fault...

PT-2003-1126 · Openldap · Openldap

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions 2.1.12 and earlier Description: The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information availability. This is due to the ldbm back exop passwd function in th...

login_ldap security announcement

Sebastian Stark from Directory Applications for Advanced Security and Information Management http://www.daasi.de has found a serious issue with loginldap, affecting all versions. loginldap is a BSD Authentication module for authenticating users off an LDAP server, and runs on OpenBSD and BSD/OS. ...

CVE-2002-1508

slapd in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests...

Critical: Red Hat Security Advisory: : Updated openldap packages available

Updated openldap packages are available which fix a number of local and remote buffer overflows in libldap and the slapd and slurpd servers, and potential issues stemming from using user-specified LDAP configuration files. OpenLDAP is a suite of LDAP Lightweight Directory Access Protocol...

Critical: Red Hat Security Advisory: openldap security update

Updated OpenLDAP packages are available which fix a number of local and remote buffer overflows in libldap as well as the slapd and slurpd daemons. Additionally, potential issues stemming from using user-specified LDAP configuration files have been addressed. Updated 06 Feb 2003 Added fixed...

[SECURITY] [DSA 227-1] New openldap packages fix buffer overflows and remote exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 227-1 [email protected] http://www.debian.org/security/ Martin Schulze January, 13th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 227-1] New openldap packages fix buffer overflows and remote exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 227-1 [email protected] http://www.debian.org/security/ Martin Schulze January, 13th, 2003 http://www.debian.org/security/faq -...

CVE-2002-1378

Multiple buffer overflows in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allow remote attackers to execute arbitrary code via 1 long -t or -r parameters to slurpd, 2 a malicious ldapfilter.conf file that is not properly handled by getfilter functions, 3 a malicious ldaptemplates.conf that causes an...

CVE-2002-1379

OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges...

CVE-2002-1378

Multiple buffer overflows in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allow remote attackers to execute arbitrary code via 1 long -t or -r parameters to slurpd, 2 a malicious ldapfilter.conf file that is not properly handled by getfilter functions, 3 a malicious ldaptemplates.conf that causes an...

CVE-2002-1379

CVE-2002-1379 concerns OpenLDAP 2 (OpenLDAP 2) up to version 2.2.0 and earlier. The issue involves libldap reading the current user’s .ldaprc file when applications run with elevated privileges, enabling either remote or local attackers to execute arbitrary code. Multiple openldap2-related adviso...

CVE-2002-1378

CVE-2002-1378 affects OpenLDAP 2 (OpenLDAP 2.2.0 and earlier). The issue comprises multiple buffer overflows in components such as slurpd (long -t/-r arguments), libldap (ldapfilter.conf, ldaptemplates.conf), slapd (ACL processing, and log filename construction for rejected replication requests)....