PT-2007-1003 · Openldap · Openldap

Toby Blake · Published 2007-10-30 · Updated 2011-03-07 · CVE-2007-5708

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.3.39 OpenLDAP versions prior to 2.3.41

Description: The issue is related to the allocation of memory in the slapo-pcache component of OpenLDAP, which can lead to a denial of service due to a segmentation fault. The vulnerability can be exploited remotely and may cause disruption to the availability of protected information.

Recommendations: For versions prior to 2.3.39, update to version 2.3.39 or later. For versions prior to 2.3.41, update to version 2.3.41 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-01320

BDU:2015-09610

CVE-2007-5708

DSA-1541-1

DTSA-87-1

Affected Products

Openldap

References · 25

• http://redhat.com/archives/fedora-package-announce/2007-November/msg00460.html · Vendor Advisory
• http://secunia.com/advisories/29682 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200803-28.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09610 · Security Note
• http://secunia.com/advisories/29461 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5707 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6698 · Security Note
• http://debian.org/security/2008/dsa-1541 · Vendor Advisory
• http://secunia.com/advisories/29225 · Vendor Advisory
• http://secunia.com/advisories/27756 · Vendor Advisory
• http://openldap.org/lists/openldap-announce/200710/msg00001.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5708 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:058 · Vendor Advisory
• http://secunia.com/advisories/27683 · Vendor Advisory
• http://secunia.com/advisories/27424 · Vendor Advisory