OpenLDAP vulnerability

2008-08-0100:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.823 High

EPSS

Percentile

98.4%

JSON

Releases

Ubuntu 8.04
Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.06

Packages

openldap2.2 -
openldap2.3 -

Details

Cameron Hotchkies discovered that OpenLDAP did not correctly handle
certain ASN.1 BER data. A remote attacker could send a specially crafted
packet and crash slapd, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchslapd< 2.4.9-0ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchldap-utils< 2.4.9-0ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibldap-2.4-2< 2.4.9-0ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibldap-2.4-2-dbg< 2.4.9-0ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibldap2-dev< 2.4.9-0ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchslapd-dbg< 2.4.9-0ubuntu0.8.04.1UNKNOWN
Ubuntu7.10noarchslapd< 2.3.35-1ubuntu0.3UNKNOWN
Ubuntu7.10noarchldap-utils< 2.3.35-1ubuntu0.3UNKNOWN
Ubuntu7.10noarchlibldap-2.3-0< 2.3.35-1ubuntu0.3UNKNOWN
Ubuntu7.04noarchslapd< 2.3.30-2ubuntu0.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	slapd	< 2.4.9-0ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	ldap-utils	< 2.4.9-0ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libldap-2.4-2	< 2.4.9-0ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libldap-2.4-2-dbg	< 2.4.9-0ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libldap2-dev	< 2.4.9-0ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	slapd-dbg	< 2.4.9-0ubuntu0.8.04.1	UNKNOWN
Ubuntu	7.10	noarch	slapd	< 2.3.35-1ubuntu0.3	UNKNOWN
Ubuntu	7.10	noarch	ldap-utils	< 2.3.35-1ubuntu0.3	UNKNOWN
Ubuntu	7.10	noarch	libldap-2.3-0	< 2.3.35-1ubuntu0.3	UNKNOWN
Ubuntu	7.04	noarch	slapd	< 2.3.30-2ubuntu0.3	UNKNOWN