GLSA-200803-28 : OpenLDAP: Denial of Service vulnerabilities
High Nessus Plugin ID 31634
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-200803-28 (OpenLDAP: Denial of Service vulnerabilities)
The following errors have been discovered in OpenLDAP:
Tony Blake discovered an error which exists within the normalisation of 'objectClasses' (CVE-2007-5707).
Thomas Sesselmann reported that, when running as a proxy-caching server the 'add_filter_attrs()' function in servers/slapd/overlay/pcache.c does not correctly NULL terminate 'new_attrs' (CVE-2007-5708).
A double-free bug exists in attrs_free() in the file servers/slapd/back-bdb/modrdn.c, which was discovered by Jonathan Clarke (CVE-2008-0658).
A remote attacker can cause a Denial of Serivce by sending a malformed 'objectClasses' attribute, and via unknown vectors that prevent the 'new_attrs' array from being NULL terminated, and via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control.
There is no known workaround at this time.
SolutionAll OpenLDAP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-nds/openldap-2.3.41'