PT-2000-1954 · Nscd+1 · Nscd+1

Published 2000-12-11 · Updated 2017-10-10 · CVE-2000-1045

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions nss ldap versions prior to 121

Description The issue allows remote attackers to cause a denial of service via a flood of LDAP requests when nss ldap is run with nscd (name service caching daemon).

Recommendations For versions prior to 121, consider disabling the use of nscd (name service caching daemon) to minimize the risk of exploitation until a newer version is available.

Fix

Related Identifiers

CVE-2000-1045

Affected Products

Nscd

Nss Ldap

References · 5

• http://securityfocus.com/bid/1863 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1045 · Security Note
• http://redhat.com/support/errata/RHSA-2000-024.html · Vendor Advisory
• http://linux-mandrake.com/en/security/MDKSA-2000-066-1.php3 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5449 · Note