Red Hat Security AdvisoryRHSA-2010:0198
openldap security and bug fix update
Released 2010-03-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) compat-openldap-2.3.43_2.2.29-12.el5, compat-openldap-2.3.43_2.2.29-12.el5.i386, compat-openldap-2.3.43_2.2.29-12.el5.ia64 +25
- Red Hat Enterprise Linux Desktop (v. 5 client) compat-openldap-2.3.43_2.2.29-12.el5, compat-openldap-2.3.43_2.2.29-12.el5.i386, openldap-2.3.43-12.el5 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openldap-2.3.43-12.el5, openldap-devel-2.3.43-12.el5, openldap-devel-2.3.43-12.el5.i386 +6
Fixes 1 record
Priority LOW 26
libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certifi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03258 · Published 2009-10-23 · Partial fix CWE-295
