Red Hat Security AdvisoryRHSA-2008:0110
openldap security update
Released 2008-02-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) compat-openldap-2.3.27_2.2.29-8.el5_1.3, compat-openldap-2.3.27_2.2.29-8.el5_1.3.i386, compat-openldap-2.3.27_2.2.29-8.el5_1.3.ia64 +21
- Red Hat Enterprise Linux AS version 4 compat-openldap-2.1.30-8.el4_6.4, compat-openldap-2.1.30-8.el4_6.4.i386, compat-openldap-2.1.30-8.el4_6.4.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 5 client) compat-openldap-2.3.27_2.2.29-8.el5_1.3, compat-openldap-2.3.27_2.2.29-8.el5_1.3.i386, openldap-2.3.27-8.el5_1.3 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openldap-2.3.27-8.el5_1.3, openldap-devel-2.3.27-8.el5_1.3, openldap-devel-2.3.27-8.el5_1.3.i386 +4
- Red Hat Enterprise Linux Desktop version 4 compat-openldap-2.1.30-8.el4_6.4, compat-openldap-2.1.30-8.el4_6.4.i386, openldap-2.2.13-8.el4_6.4 +9
- Red Hat Enterprise Linux ES version 4 compat-openldap-2.1.30-8.el4_6.4, compat-openldap-2.1.30-8.el4_6.4.i386, compat-openldap-2.1.30-8.el4_6.4.ia64 +15
- Red Hat Enterprise Linux WS version 4 compat-openldap-2.1.30-8.el4_6.4, compat-openldap-2.1.30-8.el4_6.4.i386, compat-openldap-2.1.30-8.el4_6.4.ia64 +15
Fixes 2 records
Priority LOW 24
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a re…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03053 · Published 2008-02-13 · Fixed CWE-399
Priority LOW 23
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02044 · Published 2008-02-01 · Fixed CWE-399
