OpenLDAP: Denial of Service vulnerability — GLSA 200611-25

A flaw in OpenLDAP allows remote unauthenticated attackers to cause a Denial of Service.

Affected packages

Background

OpenLDAP is a suite of LDAP-related applications and development tools.

Description

Evgeny Legerov has discovered that the truncation of an incoming authcid longer than 255 characters and ending with a space as the 255th character will lead to an improperly computed name length. This will trigger an assert in the libldap code.

Impact

By sending a BIND request with a specially crafted authcid parameter to an OpenLDAP service, a remote attacker can cause the service to crash.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose "net-nds/openldap"

References

• CVE-2006-5779

Release date
November 28, 2006

Latest revision
November 28, 2006: 01

Severity
normal

Exploitable
remote

Bugzilla entries

• 154349