Red Hat Security Advisory

RHSA-2006:0179

auth_ldap security update

Released 2006-01-10 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1

Fixes 1 record

TI-2006-00143 CVE-2006-0150 · GHSA-9gq6-2mjq-v47h

Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache…

MEDIUM 41

Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05434 Published 2006-01-09 Fixed CWE-134