Searching openldap software vulnerabilities

OpenLDAP 1.2.11 and earlier improperly installs

OpenLDAP |

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.


Multiple buffer overflows in OpenLDAP2 (OpenLDA

overflows | OpenLDAP2 | Multiple | buffer |

Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.


OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows

OpenLDAP2 |

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.


slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earli

OpenLDAP2 | slapd |

slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.


ldbm_back_exop_passwd in the back-ldbm backend

ldbm_back_exop_passwd | back-ldbm | OpenLDAP | passwdc | backend |

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).


OpenLDAP 1.0 through 2.1.19, as used in Apple M

OpenLDAP | through |

OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.


Kolab stores OpenLDAP passwords in plaintext in

world-readable | privileges | slapdconf | installed | plaintext | passwords | OpenLDAP | allows | stores | users | local | which | Kolab | gain | file | may |

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.


pam_ldap and nss_ldap, when used with OpenLDAP

connecting | subsequent | connection | cleartext | attackers | pam_ldap | nss_ldap | password | referred | OpenLDAP | client | master | allows | remote | sniff | cause | slave | using | which | used | sent | does | use | not | may | TLS |

pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.


Untrusted search path vulnerability in OpenLDAP

vulnerability | privileges | temporary | malicious | Untrusted | directory | OpenLDAP | portage | RUNPATH | 2228-r3 | shared | allows | object | search | before | Gentoo | build | users | local | which | group | Linux | part | gain | path | via |

Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.


OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 al

OpenLDAP | Apple | Mac |

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.


Stack-based buffer overflow in st.c in slurpd f

Stack-based | OpenLDAP | overflow | buffer | slurpd | before | stc |

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.


slapd in OpenLDAP before 2.3.25 allows remote a

OpenLDAP | before | slapd |

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).


OpenLDAP before 2.3.29 allows remote attackers

OpenLDAP | before |

OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.


Buffer overflow in the krbv4_ldap_auth function

servers/slapd/kerberosc | krbv4_ldap_auth | OpenLDAP | function | overflow | Buffer |

Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.


The gencert.sh script, when installing OpenLDAP

directories | installing | arbitrary | overwrite | gencertsh | temporary | securely | 2130-r10 | OpenLDAP | 2330-r2 | 2228-r7 | symlink | attack | allows | emerge | during | ebuild | Gentoo | script | before | create | local | users | files | Linux | which | does | /tmp | not | via | 23x | 22x |

The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp securely during emerge, which allows local users to overwrite arbitrary files via a symlink attack.


Software vulnerabilities results 1 to 16 of 16     
Page: 1