[SECURITY] [DSA 2628-2] nss-pam-ldapd update

2013-06-1819:52:40

lists.debian.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.8%

JSON

Debian Security Advisory DSA-2628-2 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
June 18, 2013 http://www.debian.org/security/faq

Package : nss-pam-ldapd
Vulnerability : buffer overflow
Problem type : local (remote)
Debian-specific: no
CVE ID : CVE-2013-0288

The security update DSA-2628 for nss-pam-ldapd failed to build on
kfreebsd-amd64 and kfreebsd-i386.

For the oldstable distribution (squeeze) this problem has been fixed in
version 0.7.15+squeeze4.

We recommend that you upgrade your nss-pam-ldapd packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6allnss-pam-ldapd< 0.7.15+squeeze3nss-pam-ldapd_0.7.15+squeeze3_all.deb
Debian6ia64libpam-ldapd< 0.7.15+squeeze3libpam-ldapd_0.7.15+squeeze3_ia64.deb
Debian6sparclibpam-ldapd< 0.7.15+squeeze3libpam-ldapd_0.7.15+squeeze3_sparc.deb
Debian6amd64nslcd< 0.7.15+squeeze3nslcd_0.7.15+squeeze3_amd64.deb
Debian6amd64libpam-ldapd< 0.7.15+squeeze3libpam-ldapd_0.7.15+squeeze3_amd64.deb
Debian6s390nslcd< 0.7.15+squeeze3nslcd_0.7.15+squeeze3_s390.deb
Debian6mipslibnss-ldapd< 0.7.15+squeeze3libnss-ldapd_0.7.15+squeeze3_mips.deb
Debian6powerpcnslcd< 0.7.15+squeeze3nslcd_0.7.15+squeeze3_powerpc.deb
Debian6powerpclibpam-ldapd< 0.7.15+squeeze3libpam-ldapd_0.7.15+squeeze3_powerpc.deb
Debian6sparcnslcd< 0.7.15+squeeze3nslcd_0.7.15+squeeze3_sparc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	nss-pam-ldapd	< 0.7.15+squeeze3	nss-pam-ldapd_0.7.15+squeeze3_all.deb
Debian	6	ia64	libpam-ldapd	< 0.7.15+squeeze3	libpam-ldapd_0.7.15+squeeze3_ia64.deb
Debian	6	sparc	libpam-ldapd	< 0.7.15+squeeze3	libpam-ldapd_0.7.15+squeeze3_sparc.deb
Debian	6	amd64	nslcd	< 0.7.15+squeeze3	nslcd_0.7.15+squeeze3_amd64.deb
Debian	6	amd64	libpam-ldapd	< 0.7.15+squeeze3	libpam-ldapd_0.7.15+squeeze3_amd64.deb
Debian	6	s390	nslcd	< 0.7.15+squeeze3	nslcd_0.7.15+squeeze3_s390.deb
Debian	6	mips	libnss-ldapd	< 0.7.15+squeeze3	libnss-ldapd_0.7.15+squeeze3_mips.deb
Debian	6	powerpc	nslcd	< 0.7.15+squeeze3	nslcd_0.7.15+squeeze3_powerpc.deb
Debian	6	powerpc	libpam-ldapd	< 0.7.15+squeeze3	libpam-ldapd_0.7.15+squeeze3_powerpc.deb
Debian	6	sparc	nslcd	< 0.7.15+squeeze3	nslcd_0.7.15+squeeze3_sparc.deb