Ubuntu 6.06 LTS : openldap2.2 vulnerability (USN-858-1)

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has extracte...

SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12075)

Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command. CVE-2007-6698 / CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Ubuntu Update for openldap vulnerabilities USN-551-1

Ubuntu Update for Linux kernel vulnerabilities USN-551-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5511.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openldap vulnerabilities USN-551-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CentOS Update for compat-openldap CESA-2008:0110 centos5 i386

Check for the Version of compat-openldap OpenVAS Vulnerability Test CentOS Update for compat-openldap CESA-2008:0110 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Gentoo Security Advisory GLSA 200403-12 (openldap)

The remote host is missing updates announced in advisory GLSA 200403-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200808-09 : OpenLDAP: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200808-09 OpenLDAP: Denial of Service vulnerability Cameron Hotchkies discovered an error within the parsing of ASN.1 BER encoded packets in the 'bergetnext' function in libraries/liblber/io.c. Impact : A remote unauthenticated...

OpenLDAP slapd DoS

Crash on ASR.1 BER data processing...

Important: Red Hat Security Advisory: openldap security update

Updated openldap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP...

Fedora 8 : openldap-2.3.39-4.fc8 (2008-6029)

This update fixes CVE-2008-2952 - remote unauthenticated slapd DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 4989)

Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command. CVE-2007-6698 / CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openldap: slapd crash on NOOP control operation on entry in bdb storage

The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service crash via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability...

openldap: slapd crash on modrdn operation with NOOP control on entry in bdb storage

slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service daemon crash via a modrdn operation with a NOOP LDAPXNOOPERATION control, a related issue to CVE-2007-6698...

CVE-2008-0658

slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service daemon crash via a modrdn operation with a NOOP LDAPXNOOPERATION control, a related issue to CVE-2007-6698...

CVE-2008-0658

OpenLDAP 2.3.39’s slapd with the Berkeley DB backend is affected by a programming error in the BDB interface (modrdn path) that can be exploited by an authenticated user sending a modrdn with LDAP_X_NO_OPERATION to crash the daemon. This is the same family as CVE-2007-6698 and has been publicly r...

CVE-2007-6698

The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service crash via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability...

CVE-2007-6698

OpenLDAP slapd with a Berkeley DB (BDB) backend is affected by CVE-2007-6698. A remote, authenticated user who can perform modify or modrdn operations can cause slapd to crash by sending a NOOP control marked as critical during those operations. The issue is tied to the handling of NOOP in modify...

Debian Security Advisory DSA 068-1 (openldap)

The remote host is missing an update to openldap announced via advisory DSA 068-1. OpenVAS Vulnerability Test $Id: deb0681.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 068-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 068-1 (openldap)

The remote host is missing an update to openldap announced via advisory DSA 068-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : openldap2 (ZYPP Patch Number 4679)

This update fixes multiple flaws that could cause slapd to crash. CVE-2007-5707 / CVE-2007-5708 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29536;...

openSUSE 10 Security Update : openldap2 (openldap2-4677)

This update fixes multiple flaws that could cause slapd to crash CVE-2007-5707, CVE-2007-5708. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openldap2-4677. The text description of this plug...