Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Gentoo: 200212-12 Critical: OpenLDAP Command Execution Risk

gentoo
Calendar Grey December 30, 2002
Dist Gentoo Esm H88
Addressing critical memory overflow flaws in OpenLDAP within Gentoo setups. Prompt updates are crucial for maintaining security integrity.
The SuSE Security Team reviewed critical parts of that package and found several buffer overflows and other bugs remote attackers could exploit to gain access on systems running vu...

Summary


- --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200212-12
- --------------------------------------------------------------------
DATE    : 2002-12-28 00:12 UTC

- --------------------------------------------------------------------

From SuSE Security Advisory SuSE-SA:2002:047:

"The SuSE Security Team reviewed critical parts of that package and
found several buffer overflows and other bugs remote attackers could
exploit to gain access on systems running vulnerable LDAP servers.
In addition to these bugs, various local exploitable bugs within the
OpenLDAP2 libraries (openldap2-devel package) have been fixed."

Read the full advisory at 
https://www.suse.com/de-de/

SOLUTION

It is recommended that all Gentoo Linux users who are running
net-nds/openldap-2.0.25-r2 update their systems as follows:

emerge rsync
emerge openldap
emerge clean

...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory Gentoo update buffer overflow critical remote command execution OpenLDAP

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

PACKAGE : openldap
SUMMARY : remote command execution
EXPLOIT : remote

Topics%20covered

Topics Covered

security advisory Gentoo update buffer overflow critical remote command execution OpenLDAP

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here