PT-2006-7589 · Openldap · Openldap

Evgeny Legerov

·

CVE-2006-5779

·

Publicado

1970-01-01

·

Atualizado

2024-02-08

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.3.29
Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via LDAP BIND requests with long authcid names. This triggers an assertion failure, leading to a disruption in the availability of protected information. The exploitation of this issue can be carried out remotely.
Recommendations For OpenLDAP versions prior to 2.3.29, update to version 2.3.29 or later to resolve the issue. As a temporary workaround, consider restricting access to LDAP BIND requests to minimize the risk of exploitation.

Exploit

Correção

Assertion Failure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

BDU:2015-04656
BDU:2015-04657
BDU:2015-04658
BDU:2015-04659
BDU:2015-04933
BDU:2015-04934
BDU:2015-04935
BDU:2015-04936
BDU:2015-09541
CVE-2006-5779

Produtos afetados

Openldap