Description
OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.
References
- 23133 third-party-advisory
- SUSE-SA:2006:072 vendor-advisory
- http://gleg.net/vulndisco_meta.shtml
- https://issues.rpath.com/browse/RPL-820
- 23170 third-party-advisory
- 1017166 vdb-entry
- 2006-0066 vendor-advisory
- MDKSA-2006:208 vendor-advisory
- ADV-2006-4379 vdb-entry
- 20939 vdb-entry
- USN-384-1 vendor-advisory
- openldap-bind-dos(30076) vdb-entry
- http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4740
- 23152 third-party-advisory
- http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz
- 22996 third-party-advisory
- OpenPKG-SA-2006.033 vendor-advisory
- 22953 third-party-advisory
- 23125 third-party-advisory
- 20061106 VulnDisco Pack for Metasploit mailing-list
- 1831 third-party-advisory
- GLSA-200611-25 vendor-advisory
- 22750 third-party-advisory