PT-2007-1003 · Openldap · Openldap

Toby Blake · Publicado 2007-10-30 · Atualizado 2011-03-07 · CVE-2007-5708

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.3.39 OpenLDAP versions prior to 2.3.41

Description: The issue is related to the allocation of memory in the slapo-pcache component of OpenLDAP, which can lead to a denial of service due to a segmentation fault. The vulnerability can be exploited remotely and may cause disruption to the availability of protected information.

Recommendations: For versions prior to 2.3.39, update to version 2.3.39 or later. For versions prior to 2.3.41, update to version 2.3.41 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-01320

BDU:2015-09610

CVE-2007-5708

DSA-1541-1

DTSA-87-1

Produtos afetados

Openldap

Referências · 25

• http://redhat.com/archives/fedora-package-announce/2007-November/msg00460.html · Aviso do Fabricante
• http://secunia.com/advisories/29682 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200803-28.xml · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09610 · Nota de Segurança
• http://secunia.com/advisories/29461 · Aviso do Fabricante
• http://debian.org/security/dsa-1541 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5707 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6698 · Nota de Segurança
• http://debian.org/security/2008/dsa-1541 · Aviso do Fabricante
• http://securityfocus.com/bid/26245 · Nota
• http://secunia.com/advisories/29225 · Aviso do Fabricante
• http://secunia.com/advisories/27756 · Aviso do Fabricante
• http://openldap.org/lists/openldap-announce/200710/msg00001.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5708 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2008:058 · Aviso do Fabricante