GLSA-200803-28 : OpenLDAP: Denial of Service vulnerabilities

high Nessus Plugin ID 31634

Synopsis

The remote Gentoo host is missing one or more security-related patches.

Description

The remote host is affected by the vulnerability described in GLSA-200803-28 (OpenLDAP: Denial of Service vulnerabilities)

The following errors have been discovered in OpenLDAP:
Tony Blake discovered an error which exists within the normalisation of 'objectClasses' (CVE-2007-5707).
Thomas Sesselmann reported that, when running as a proxy-caching server the 'add_filter_attrs()' function in servers/slapd/overlay/pcache.c does not correctly NULL terminate 'new_attrs' (CVE-2007-5708).
A double-free bug exists in attrs_free() in the file servers/slapd/back-bdb/modrdn.c, which was discovered by Jonathan Clarke (CVE-2008-0658).
Impact :

A remote attacker can cause a Denial of Serivce by sending a malformed 'objectClasses' attribute, and via unknown vectors that prevent the 'new_attrs' array from being NULL terminated, and via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control.
Workaround :

There is no known workaround at this time.

Solution

All OpenLDAP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-nds/openldap-2.3.41'

Plugin Details

Severity: High

ID: 31634

File Name: gentoo_GLSA-200803-28.nasl

Version: 1.15

Type: local

Family: Gentoo Local Security Checks

Published: 3/21/2008

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: High

Base Score: 7.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:openldap, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Patch Publication Date: 3/19/2008

Vulnerability Publication Date: 10/26/2007

Reference Information

CVE: CVE-2007-5707, CVE-2007-5708, CVE-2008-0658

CWE: 399

GLSA: 200803-28

Detections

Analytics