OpenLDAP vulnerability

Releases

• Ubuntu 6.06
• Ubuntu 5.10
• Ubuntu 5.04

Details

When processing overly long host names in OpenLDAP’s slurpd replication
server, a buffer overflow caused slurpd to crash.

If an attacker manages to inject a specially crafted host name into
slurpd, this might also be exploited to execute arbitrary code with
slurpd’s privileges; however, since slurpd is usually set up to
replicate only trusted machines, this should not be exploitable in
normal cases.