PT-2001-2678 · Openldap · Openldap

Published 1970-01-01 · Updated 2017-10-10 · CVE-2001-0977

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 1.2.12 OpenLDAP versions prior to 2.0.8 OpenLDAP version 2.0.11

Description The issue is related to multiple vulnerabilities in the OpenLDAP package, which can lead to a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field. The vulnerabilities can be exploited remotely, potentially disrupting the availability of protected information.

Recommendations For OpenLDAP versions prior to 1.2.12, update to version 1.2.12 or later. For OpenLDAP versions prior to 2.0.8, update to version 2.0.8 or later. For OpenLDAP version 2.0.11, update to a version later than 2.0.11.

Fix

Related Identifiers

BDU:2015-02567

BDU:2015-02568

BDU:2015-02569

BDU:2015-02570

BDU:2015-02571

BDU:2015-02572

BDU:2015-02573

BDU:2015-07861

BDU:2015-07862

BDU:2015-07863

BDU:2015-07864

BDU:2015-07865

CVE-2001-0977

Affected Products

Openldap

References · 25

• http://kb.cert.org/vuls/id/935800 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2001-0977 · Security Note
• http://debian.org/security/2001/dsa-068 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000417 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07863 · Security Note
• https://bdu.fstec.ru/vul/2015-02573 · Security Note
• https://bdu.fstec.ru/vul/2015-02572 · Security Note
• https://bdu.fstec.ru/vul/2015-07865 · Security Note
• http://securityfocus.com/bid/3049 · Vendor Advisory
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-069.php3 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02568 · Security Note
• https://bdu.fstec.ru/vul/2015-02571 · Security Note
• https://bdu.fstec.ru/vul/2015-02569 · Security Note
• https://bdu.fstec.ru/vul/2015-02570 · Security Note
• https://bdu.fstec.ru/vul/2015-07864 · Security Note