Published: 01/02/2008 Updated: 15/10/2018

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

The BDB backend for slapd in OpenLDAP prior to 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openldap openldap

Jonathan Clarke discovered that the OpenLDAP slapd server did not properly handle modify requests when using the Berkeley DB backend and specifying the NOOP control An authenticated user with modify permissions could send a crafted modify request and cause a denial of service via application crash Ubuntu 710 is not affected by this issue ( ...

CWE-399 http://www.openldap.org/lists/openldap-bugs/200704/msg00067.html http://www.openldap.org/lists/openldap-bugs/200704/msg00068.html https://bugzilla.redhat.com/show_bug.cgi?id=431203 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00105.html http://secunia.com/advisories/28817 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059 http://www.securityfocus.com/bid/26245 http://secunia.com/advisories/28953 http://www.redhat.com/support/errata/RHSA-2008-0110.html http://www.securitytracker.com/id?1019480 http://secunia.com/advisories/29068 http://www.mandriva.com/security/advisories?name=MDVSA-2008:058 http://www.ubuntu.com/usn/usn-584-1 http://secunia.com/advisories/29225 http://secunia.com/advisories/29256 http://www.debian.org/security/2008/dsa-1541 http://secunia.com/advisories/29682 http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html http://secunia.com/advisories/29957 http://wiki.rpath.com/Advisories:rPSA-2008-0059 http://support.apple.com/kb/HT3937 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html http://www.vupen.com/english/advisories/2009/3184 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10748 http://www.securityfocus.com/archive/1/488242/100/200/threaded https://usn.ubuntu.com/584-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6698

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect