CVE-2003-1201

Опубликовано: 20 мар. 2003

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).

Ссылки

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685
Broken Link
Patch
http://secunia.com/advisories/11261
Broken Link
Patch
http://secunia.com/advisories/9203
Broken Link
Patch
http://security.gentoo.org/glsa/glsa-200403-12.xml
Third Party Advisory
http://www.openldap.org/its/index.cgi?findid=2390
Issue Tracking
Patch
http://www.osvdb.org/17000
Broken Link
http://www.securityfocus.com/bid/7656
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/12520
Third Party Advisory
VDB Entry
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685
Broken Link
Patch
http://secunia.com/advisories/11261
Broken Link
Patch
http://secunia.com/advisories/9203
Broken Link
Patch
http://security.gentoo.org/glsa/glsa-200403-12.xml
Third Party Advisory
http://www.openldap.org/its/index.cgi?findid=2390
Issue Tracking
Patch
http://www.osvdb.org/17000
Broken Link
http://www.securityfocus.com/bid/7656
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/12520
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*

Версия до 2.1.12 (включая)

EPSS

Процентиль: 51%

0.00282

Низкий

5 Medium

CVSS2

Дефекты

CWE-824

Связанные уязвимости

CVE-2003-1201

debian

больше 22 лет назад

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDA ...

GHSA-4q24-rv9c-m9wm

github

больше 3 лет назад

BDU:2015-09447

fstec

больше 21 года назад

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации