CVE-2010-0211
EUVD-2010-024228.07.2010, 12:48
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openldap | openldap | 2.4.22 |
| vmware | esxi | 4.0 |
| vmware | esxi | 4.1 |
| opensuse | opensuse | 11.0 |
| apple | mac_os_x | 10.6.0 ≤ 𝑥 < 10.6.5 |
| apple | mac_os_x_server | 10.6.0 ≤ 𝑥 < 10.6.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| openldap |
| ||||||||||
| openldap2.2 |
| ||||||||||
| openldap2.3 |
|
Common Weakness Enumeration
References