Lucene search
UbuntuUSN-858-1HistoryNov 12, 2009 - 12:00 a.m.
OpenLDAP vulnerability
2009-11-1200:00:00
ubuntu.com
37
9.3 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.4%
Releases
- Ubuntu 6.06
Packages
- openldap2.2 -
Details
It was discovered that OpenLDAP did not correctly handle SSL certificates
with zero bytes in the Common Name. A remote attacker could exploit this to
perform a machine-in-the-middle attack to view sensitive information or alter
encrypted communications.
References
Related
nessus
nessus
Scientific Linux Security Update : openldap on SL5.x i386/x86_64
2012-08-01 00:00:00
Ubuntu 6.06 LTS : openldap2.2 vulnerability (USN-858-1)
2009-11-13 00:00:00
RHEL 5 : openldap (RHSA-2010:0198)
2010-05-11 00:00:00
openvas
openvas
Ubuntu USN-858-1 (openldap2.2)
2009-11-17 00:00:00
Debian: Security Advisory (DSA-1943-1)
2009-12-09 00:00:00
Debian Security Advisory DSA 1943-1 (openldap openldap2.3)
2009-12-10 00:00:00
freebsd
freebsd
OpenLDAP -- incorrect handling of NULL in certificate Common Name
2009-08-07 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:44:17
redhat
redhat
(RHSA-2010:0198) Moderate: openldap security and bug fix update
2010-03-30 00:00:00
(RHSA-2010:0543) Moderate: openldap security update
2010-07-20 00:00:00
oraclelinux
oraclelinux
openldap security and bug fix update
2010-04-05 00:00:00
openldap security update
2010-07-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2009-3767 affecting package openssl 1.1.1g-6
2021-08-11 06:39:26
CVE-2009-3767 affecting package openldap 2.4.50-1
2021-04-06 23:50:10
securityvulns
securityvulns
OpenLDAP certificate spoofing
2009-11-13 00:00:00
[USN-858-1] OpenLDAP vulnerability
2009-11-13 00:00:00
seebug
seebug
OpenLDAP CA SSLθ―δΉ¦ιͺθ―ζΌζ΄
2009-10-27 00:00:00
debian
debian
fedora
fedora
[SECURITY] Fedora 11 Update: openldap-2.4.15-7.fc11
2010-03-02 01:03:33
ubuntucve
ubuntucve
CVE-2009-3767
2009-10-23 00:00:00
prion
prion
Design/Logic Flaw
2009-10-23 19:30:00
centos
centos
compat, openldap security update
2010-07-21 19:15:25
debiancve
debiancve
CVE-2009-3767
2009-10-23 19:30:00
cve
cve
CVE-2009-3767
2009-10-23 19:30:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
VMware ESX third party updates for Service Console
2010-09-30 00:00:00
gentoo
gentoo
OpenLDAP: Multiple vulnerabilities
2014-06-30 00:00:00
9.3 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.4%
Related for USN-858-1