Description
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.
References
- USN-305-1 vendor-advisory
- http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c.diff?r1=1.21&r2=1.22&hideattic=1&sortbydate=0&f=h
- 20126 third-party-advisory
- 20495 third-party-advisory
- http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22
- ADV-2006-1921 vdb-entry
- GLSA-200606-17 vendor-advisory
- 20060609 rPSA-2006-0099-1 openldap openldap-clients openldap-servers mailing-list
- MDKSA-2006:096 vendor-advisory
- 20685 third-party-advisory
- 25659 vdb-entry
- OpenPKG-SA-2006.008 vendor-advisory
- http://www.openldap.org/software/release/changes.html
- 20848 third-party-advisory