Lucene search
Oscar Mira-SanchezZDI-08-052HistoryAug 14, 2008 - 12:00 a.m.
OpenLDAP BER Decoding Remote DoS Vulnerability
2008-08-1400:00:00
Oscar Mira-Sanchez
www.zerodayinitiative.com
14
EPSS
0.823
Percentile
98.4%
This vulnerability allows remote attackers to deny services on vulnerable installations of OpenLDAP. Authentication is not required to exploit this vulnerability. The specific flaw exists in the decoding of ASN.1 BER network datagrams. When the size of a BerElement is specified incorrectly, the application will trigger an assert(), leading to abnormal program termination.
Related
openvas
openvas
Debian: Security Advisory (DSA-1650-1)
2008-11-01 00:00:00
Ubuntu: Security Advisory (USN-634-1)
2009-03-23 00:00:00
CentOS Update for compat-openldap CESA-2008:0583 centos4 i386
2009-02-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package openldap2.4 version 2.3.41-alt2
2008-07-02 00:00:00
securityvulns
securityvulns
[USN-634-1] OpenLDAP vulnerability
2008-08-03 00:00:00
OpenLDAP slapd DoS
2008-08-03 00:00:00
nessus
nessus
openSUSE Security Update : openldap2 (openldap2-145)
2009-07-21 00:00:00
Mandriva Linux Security Advisory : openldap (MDVSA-2008:144)
2009-04-23 00:00:00
openSUSE 10 Security Update : openldap2 (openldap2-5509)
2008-10-17 00:00:00
nvd
nvd
CVE-2008-2952
2008-07-01 21:41:00
prion
prion
Code injection
2008-07-01 21:41:00
debian
debian
[SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service
2008-10-12 09:35:44
cve
cve
CVE-2008-2952
2008-07-01 21:41:00
centos
centos
compat, openldap security update
2008-07-09 16:17:29
exploitdb
exploitdb
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
2008-06-30 00:00:00
debiancve
debiancve
CVE-2008-2952
2008-07-01 21:41:00
checkpoint_advisories
checkpoint_advisories
OpenLDAP ber_get_next BER Decoding Denial of Service
2008-10-10 00:00:00
OpenLDAP BER Decoding Denial of Service (CVE-2008-2952)
2010-03-24 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: openldap-2.4.8-6.fc9
2008-07-03 03:17:22
[SECURITY] Fedora 8 Update: openldap-2.3.39-4.fc8
2008-07-03 03:15:35
osv
osv
openldap2.3 - denial of service
2008-10-12 00:00:00
redhat
redhat
(RHSA-2008:0583) Important: openldap security update
2008-07-09 00:00:00
gentoo
gentoo
OpenLDAP: Denial of Service vulnerability
2008-08-08 00:00:00
ubuntu
ubuntu
OpenLDAP vulnerability
2008-08-01 00:00:00
ubuntucve
ubuntucve
CVE-2008-2952
2008-07-01 00:00:00
oraclelinux
oraclelinux
openldap security update
2008-07-09 00:00:00
cvelist
cvelist
CVE-2008-2952
2008-07-01 21:00:00