CVE-2010-0211

Related Files

Gentoo Linux Security Advisory 201406-36

Posted Jul 1, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201406-36 - Multiple vulnerabilities were found in OpenLDAP, allowing for Denial of Service or a man-in-the-middle attack. Versions less than 2.4.35 are affected.

tags | advisory, denial of service, vulnerability

systems | linux, gentoo

advisories | CVE-2009-3767, CVE-2010-0211, CVE-2010-0212, CVE-2011-1024, CVE-2011-1025, CVE-2011-1081, CVE-2011-4079, CVE-2012-1164, CVE-2012-2668

SHA-256 | 42774738976bd9d080b8893ce307ab134ab715b79f71571a7a4bb8a11e479e75

Download | Favorite | View

VMware Security Advisory 2011-0001

Posted Jan 6, 2011

Authored by VMware | Site vmware.com

VMware Security Advisory 2011-0001 - ESX 4.0 Service Console OS (COS) updates for glibc, sudo, and openldap packages.

tags | advisory

advisories | CVE-2010-0211, CVE-2010-0212, CVE-2010-2956, CVE-2010-3847, CVE-2010-3856

SHA-256 | c46f8a177cb54cdf53c56e8c0fc1617a7a611c96438fab66c017b274544829ed

Download | Favorite | View

Ubuntu Security Notice 965-1

Posted Aug 12, 2010

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 965-1 - Using the Codenomicon LDAPv3 test suite, Ilkka Mattila and Tuomas Salomaki discovered that the slap_modrdn2mods function in modrdn.c in OpenLDAP does not check the return value from a call to the smr_normalize function. A remote attacker could use specially crafted modrdn requests to crash the slapd daemon or possibly execute arbitrary code. Using the Codenomicon LDAPv3 test suite, Ilkka Mattila and Tuomas Salomaki discovered that OpenLDAP does not properly handle empty RDN strings. A remote attacker could use specially crafted modrdn requests to crash the slapd daemon. In the default installation under Ubuntu 8.04 LTS and later, attackers would be isolated by the OpenLDAP AppArmor profile for the slapd daemon.

tags | advisory, remote, arbitrary

systems | linux, ubuntu

advisories | CVE-2010-0211, CVE-2010-0212

SHA-256 | 3ca13ddfe2e88809d4d45a5479af662f44cb198db14ce2072fe0867f6ded3b2e

Download | Favorite | View

Debian Linux Security Advisory 2077-1

Posted Aug 3, 2010

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2077-1 - Two remote vulnerabilities have been discovered in OpenLDAP.

tags | advisory, remote, vulnerability

systems | linux, debian

advisories | CVE-2010-0211, CVE-2010-0212

SHA-256 | 3b57863bf21b91a96a5e09e82f4c8189f5a844195c23846de14271251152f90c

Download | Favorite | View

Mandriva Linux Security Advisory 2010-142

Posted Jul 28, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-142 - The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite. OpenLDAP 2.4.22 allows remote attackers to cause a denial of service via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schema_init.c, as demonstrated using the Codenomicon LDAPv3 test suite.

tags | advisory, remote, denial of service, arbitrary

systems | linux, mandriva

advisories | CVE-2010-0211, CVE-2010-0212

SHA-256 | da58b230384d632c52553a0dc4b5256eeaf3ce762c74c6ad7d8fb67893b6ff42

Download | Favorite | View