Executive Summary
Summary | |
---|---|
Title | OpenLDAP vulnerabilities |
Informations | |||
---|---|---|---|
Name | USN-1100-1 | First vendor Publication | 2011-03-31 |
Vendor | Ubuntu | Last vendor Modification | 2011-03-31 |
Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P) | |||
---|---|---|---|
Cvss Base Score | 6.8 | Attack Range | Network |
Cvss Impact Score | 6.4 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 9.10 Ubuntu 10.04 LTS Ubuntu 10.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: Ubuntu 9.10: Ubuntu 10.04 LTS: Ubuntu 10.10: In general, a standard system update will make all the necessary changes. Details follow: It was discovered that OpenLDAP did not properly check forwarded authentication failures when using a slave server and chain overlay. If OpenLDAP were configured in this manner, an attacker could bypass authentication checks by sending an invalid password to a slave server. (CVE-2011-1024) It was discovered that OpenLDAP did not properly perform authentication checks to the rootdn when using the back-ndb backend. An attacker could exploit this to access the directory by sending an arbitrary password. Ubuntu does not ship OpenLDAP with back-ndb support by default. This issue did not affect Ubuntu 8.04 LTS. (CVE-2011-1025) It was discovered that OpenLDAP did not properly validate modrdn requests. An unauthenticated remote user could use this to cause a denial of service via application crash. (CVE-2011-1081) |
Original Source
Url : http://www.ubuntu.com/usn/USN-1100-1 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
33 % | CWE-399 | Resource Management Errors |
33 % | CWE-287 | Improper Authentication |
33 % | CWE-264 | Permissions, Privileges, and Access Controls |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:21750 | |||
Oval ID: | oval:org.mitre.oval:def:21750 | ||
Title: | RHSA-2011:0347: openldap security update (Moderate) | ||
Description: | modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field. | ||
Family: | unix | Class: | patch |
Reference(s): | RHSA-2011:0347-01 CVE-2011-1024 CVE-2011-1025 CVE-2011-1081 | Version: | 42 |
Platform(s): | Red Hat Enterprise Linux 6 | Product(s): | openldap |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:21865 | |||
Oval ID: | oval:org.mitre.oval:def:21865 | ||
Title: | RHSA-2011:0346: openldap security and bug fix update (Moderate) | ||
Description: | chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server. | ||
Family: | unix | Class: | patch |
Reference(s): | RHSA-2011:0346-01 CESA-2011:0346 CVE-2011-1024 | Version: | 4 |
Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 | Product(s): | openldap |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:22679 | |||
Oval ID: | oval:org.mitre.oval:def:22679 | ||
Title: | ELSA-2011:0347: openldap security update (Moderate) | ||
Description: | modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field. | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2011:0347-01 CVE-2011-1024 CVE-2011-1025 CVE-2011-1081 | Version: | 17 |
Platform(s): | Oracle Linux 6 | Product(s): | openldap |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:23088 | |||
Oval ID: | oval:org.mitre.oval:def:23088 | ||
Title: | ELSA-2011:0346: openldap security and bug fix update (Moderate) | ||
Description: | chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server. | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2011:0346-01 CVE-2011-1024 | Version: | 6 |
Platform(s): | Oracle Linux 5 | Product(s): | openldap |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:27370 | |||
Oval ID: | oval:org.mitre.oval:def:27370 | ||
Title: | DEPRECATED: ELSA-2011-0346 -- openldap security and bug fix update (moderate) | ||
Description: | [2.3.43-12.7] - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success (#680484) [2.3.43-12.6] - fix: slapd concurrent access to connections causes slapd to silently die (#677611) | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2011-0346 CVE-2011-1024 | Version: | 4 |
Platform(s): | Oracle Linux 5 | Product(s): | openldap |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:28071 | |||
Oval ID: | oval:org.mitre.oval:def:28071 | ||
Title: | DEPRECATED: ELSA-2011-0347 -- openldap security update (moderate) | ||
Description: | [2.4.19-15.2] - fix: security - DoS when submitting special MODRDN request (#680975) [2.4.19-15.1] - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success - fix: CVE-2011-1025 rootpw is not verified for ndb backend | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2011-0347 CVE-2011-1024 CVE-2011-1025 CVE-2011-1081 | Version: | 4 |
Platform(s): | Oracle Linux 6 | Product(s): | openldap |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
OpenVAS Exploits
Date | Description |
---|---|
2012-07-30 | Name : CentOS Update for compat-openldap CESA-2011:0346 centos5 x86_64 File : nvt/gb_CESA-2011_0346_compat-openldap_centos5_x86_64.nasl |
2012-06-06 | Name : RedHat Update for openldap RHSA-2011:0347-01 File : nvt/gb_RHSA-2011_0347-01_openldap.nasl |
2011-09-27 | Name : Fedora Update for openldap FEDORA-2011-3627 File : nvt/gb_fedora_2011_3627_openldap_fc14.nasl |
2011-08-09 | Name : CentOS Update for compat-openldap CESA-2011:0346 centos5 i386 File : nvt/gb_CESA-2011_0346_compat-openldap_centos5_i386.nasl |
2011-04-01 | Name : Mandriva Update for openldap MDVSA-2011:055 (openldap) File : nvt/gb_mandriva_MDVSA_2011_055.nasl |
2011-04-01 | Name : Mandriva Update for openldap MDVSA-2011:056 (openldap) File : nvt/gb_mandriva_MDVSA_2011_056.nasl |
2011-04-01 | Name : Ubuntu Update for openldap, openldap2.3 vulnerabilities USN-1100-1 File : nvt/gb_ubuntu_USN_1100_1.nasl |
2011-03-15 | Name : RedHat Update for openldap RHSA-2011:0346-01 File : nvt/gb_RHSA-2011_0346-01_openldap.nasl |
2011-03-05 | Name : FreeBSD Ports: openldap-server File : nvt/freebsd_openldap-server2.nasl |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
72530 | OpenLDAP slapd modrdn.c Malformed Relative Distinguished Name (DN) Modificati... |
72529 | OpenLDAP back-ndb bind.cpp root Distinguished Name (DN) Arbitrary Password Au... |
72528 | OpenLDAP back-ldap chain.c Slave Server Invalid Password External-program Aut... |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2016-06-22 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0069.nasl - Type : ACT_GATHER_INFO |
2014-11-17 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2011-0439.nasl - Type : ACT_GATHER_INFO |
2014-07-01 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-36.nasl - Type : ACT_GATHER_INFO |
2014-06-13 | Name : The remote openSUSE host is missing a security update. File : suse_11_4_openldap2-110304.nasl - Type : ACT_GATHER_INFO |
2014-06-13 | Name : The remote openSUSE host is missing a security update. File : suse_11_3_openldap2-110303.nasl - Type : ACT_GATHER_INFO |
2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0346.nasl - Type : ACT_GATHER_INFO |
2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-0347.nasl - Type : ACT_GATHER_INFO |
2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110310_openldap_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110310_openldap_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
2011-09-26 | Name : The remote Fedora host is missing a security update. File : fedora_2011-3627.nasl - Type : ACT_GATHER_INFO |
2011-05-05 | Name : The remote openSUSE host is missing a security update. File : suse_11_2_openldap2-110303.nasl - Type : ACT_GATHER_INFO |
2011-04-22 | Name : The remote Fedora host is missing a security update. File : fedora_2011-3612.nasl - Type : ACT_GATHER_INFO |
2011-04-19 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-libldap-2_3-0-110303.nasl - Type : ACT_GATHER_INFO |
2011-04-15 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-0346.nasl - Type : ACT_GATHER_INFO |
2011-04-01 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1100-1.nasl - Type : ACT_GATHER_INFO |
2011-03-31 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-056.nasl - Type : ACT_GATHER_INFO |
2011-03-31 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-055.nasl - Type : ACT_GATHER_INFO |
2011-03-11 | Name : The remote host is missing the patch for the advisory RHSA-2011-0347 File : redhat-RHSA-2011-0347.nasl - Type : ACT_GATHER_INFO |
2011-03-11 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0346.nasl - Type : ACT_GATHER_INFO |
Alert History
Date | Informations |
---|---|
2014-02-17 11:58:27 |
|