GLSA-200803-28 : OpenLDAP: Denial of Service vulnerabilities

High Nessus Plugin ID 31634


The remote Gentoo host is missing one or more security-related patches.


The remote host is affected by the vulnerability described in GLSA-200803-28 (OpenLDAP: Denial of Service vulnerabilities)

The following errors have been discovered in OpenLDAP:
Tony Blake discovered an error which exists within the normalisation of 'objectClasses' (CVE-2007-5707).
Thomas Sesselmann reported that, when running as a proxy-caching server the 'add_filter_attrs()' function in servers/slapd/overlay/pcache.c does not correctly NULL terminate 'new_attrs' (CVE-2007-5708).
A double-free bug exists in attrs_free() in the file servers/slapd/back-bdb/modrdn.c, which was discovered by Jonathan Clarke (CVE-2008-0658).
Impact :

A remote attacker can cause a Denial of Serivce by sending a malformed 'objectClasses' attribute, and via unknown vectors that prevent the 'new_attrs' array from being NULL terminated, and via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control.
Workaround :

There is no known workaround at this time.


All OpenLDAP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-nds/openldap-2.3.41'

See Also

Plugin Details

Severity: High

ID: 31634

File Name: gentoo_GLSA-200803-28.nasl

Version: $Revision: 1.12 $

Type: local

Published: 2008/03/21

Modified: 2015/04/13

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:openldap, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Patch Publication Date: 2008/03/19

Vulnerability Publication Date: 2007/10/26

Reference Information

CVE: CVE-2007-5707, CVE-2007-5708, CVE-2008-0658

OSVDB: 38484, 38485, 41948

GLSA: 200803-28

CWE: 399