National Cyber Awareness System

Vulnerability Summary for CVE-2008-2952

Overview

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2008-6062

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00129.html

External Source: FEDORA

Name: FEDORA-2008-6029

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00109.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-2645

Hyperlink:https://issues.rpath.com/browse/RPL-2645

External Source: XF

Name: openldap-bergetnext-dos(43515)

Hyperlink:http://xforce.iss.net/xforce/xfdb/43515

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-08-052/

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-08-052/

External Source: VUPEN

Name: ADV-2008-2268

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2008/2268

External Source: VUPEN

Name: ADV-2008-1978

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2008/1978/references

External Source: UBUNTU

Name: USN-634-1

Hyperlink:http://www.ubuntu.com/usn/usn-634-1

External Source: SECTRACK

Name: 1020405

Hyperlink:http://www.securitytracker.com/id?1020405

External Source: BID

Name: 30013

Hyperlink:http://www.securityfocus.com/bid/30013

External Source: BUGTRAQ

Name: 20080811 rPSA-2008-0249-1 openldap openldap-clients openldap-servers

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/495320/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:0583

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0583.html

External Source: MLIST

Name: [oss-security] 20080713 Re: openldap DoS

Hyperlink:http://www.openwall.com/lists/oss-security/2008/07/13/2

External Source: MLIST

Name: [oss-security 20080701 Re: [oss-security] openldap DoS

Hyperlink:http://www.openwall.com/lists/oss-security/2008/07/01/2

External Source: CONFIRM

Name: http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580;selectid=5580

Hyperlink:http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580;selectid=5580

External Source: CONFIRM

Name: http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580

Hyperlink:http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580

External Source: MANDRIVA

Name: MDVSA-2008:144

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:144

External Source: DEBIAN

Name: DSA-1650

Hyperlink:http://www.debian.org/security/2008/dsa-1650

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2008-0249

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2008-0249

External Source: GENTOO

Name: GLSA-200808-09

Hyperlink:http://security.gentoo.org/glsa/glsa-200808-09.xml

External Source: SECUNIA

Name: 32316

Type: Advisory

Hyperlink:http://secunia.com/advisories/32316

External Source: SECUNIA

Name: 32254

Type: Advisory

Hyperlink:http://secunia.com/advisories/32254

External Source: SECUNIA

Name: 31436

Type: Advisory

Hyperlink:http://secunia.com/advisories/31436

External Source: SECUNIA

Name: 31364

Type: Advisory

Hyperlink:http://secunia.com/advisories/31364

External Source: SECUNIA

Name: 31326

Type: Advisory

Hyperlink:http://secunia.com/advisories/31326

External Source: SECUNIA

Name: 30996

Type: Advisory

Hyperlink:http://secunia.com/advisories/30996

External Source: SECUNIA

Name: 30917

Type: Advisory

Hyperlink:http://secunia.com/advisories/30917

External Source: SECUNIA

Name: 30853

Type: Advisory

Hyperlink:http://secunia.com/advisories/30853

External Source: OVAL

Name: oval:org.mitre.oval:def:10662

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10662

External Source: SUSE

Name: SUSE-SR:2008:021

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

External Source: APPLE

Name: APPLE-SA-2008-07-31

Hyperlink:http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10662

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10662