PT-2011-1104 · Openldap+1 · Openldap+1

Ralf Haferkamp + 1 · Published 2011-03-10 · Updated 2017-08-17 · CVE-2011-1081

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.24 OpenLDAP versions 2.4.19 OpenLDAP version 2.4.35 and earlier

Description The issue affects the confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be done remotely. In OpenLDAP 2.4.x before 2.4.24, the modrdn.c in slapd allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request that contains an empty value for the OldDN field.

Recommendations For OpenLDAP versions prior to 2.4.24, update to version 2.4.24 or later. For OpenLDAP versions 2.4.19, update to a version later than 2.4.19. For OpenLDAP version 2.4.35 and earlier, update to version 2.4.35 or later. As a temporary workaround, consider restricting access to the vulnerable modrdn function until a patch is available.

Exploit

Fix

DoS

Improper Certificate Validation

Weakness Enumeration

CWE-295

CWE-399

CWE-264

Related Identifiers

BDU:2015-06163

BDU:2015-06459

BDU:2015-06460

BDU:2015-06461

BDU:2015-06462

BDU:2015-06463

BDU:2015-06464

BDU:2015-09683

CVE-2011-1081

RHSA-2011:0347

RHSA-2011_0347

Affected Products

Openldap

Red Hat

References · 53

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=680975 · Exploit
• 🔥 https://exploit-db.com/exploits/35445 · Exploit
• http://mandriva.com/security/advisories?name=MDVSA-2011:056 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06461 · Security Note
• https://bdu.fstec.ru/vul/2015-08720 · Security Note
• http://secunia.com/advisories/43331 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07177 · Security Note
• http://security.gentoo.org/glsa/glsa-201406-36.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1081 · Vendor Advisory
• http://openldap.org/lists/openldap-announce/201102/msg00000.html · Patch
• https://linux.oracle.com/errata/ELSA-2011-0347.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1081 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1081 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06460 · Security Note
• http://openwall.com/lists/oss-security/2011/02/28/2 · Patch