OpenLDAP Server Bind Request Denial Of Service Vulnerability

OpenLDAP Server Bind Request Denial Of Service Vulnerability

Solution:
The vendor has released an update to address this issue. Please see the references for information on how to obtain and apply this update.

OpenLDAP OpenLDAP 2.3.28-2.20061022

OpenPKG openldap-2.3.29-2.20061110
2-STABLE
ftp://ftp.openpkg.org/release

OpenLDAP OpenLDAP 2.3.27-2.20061018

OpenPKG openldap-2.3.29-2.20061110
2-STABLE-20061018
ftp://ftp.openpkg.org/release

Turbolinux Appliance Server 2.0

Turbolinux openldap-2.2.15-13.i586.rpm
Turbolinux Appliance Server 2.0
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

Turbolinux openldap-devel-2.2.15-13.i586.rpm
Turbolinux Appliance Server 2.0
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

Turbolinux openldap-libs-2.2.15-13.i586.rpm
Turbolinux Appliance Server 2.0
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

Turbolinux openldap-servers-2.2.15-13.i586.rpm
Turbolinux Appliance Server 2.0
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

OpenLDAP OpenLDAP 2.3.28-20061022

OpenPKG openldap-2.3.29-20061110
CURRENT
ftp://ftp.openpkg.org/release

OpenLDAP OpenLDAP 2.3.28-E1.0.0

OpenPKG openldap-2.3.28-E1.0.1
E1.0-SOLID
ftp://ftp.openpkg.org/release

Turbolinux Turbolinux Server 10.0

Turbolinux openldap-2.2.15-13.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/openldap-2.2.15-13.i586.rpm

Turbolinux openldap-2.2.18-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/openldap-2.2.18-9.x86_64.rpm

Turbolinux openldap-32bit-2.2.15-13_2006120101.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/openldap-32bit-2.2.15-13_2006120101.x86_64.rpm

Turbolinux openldap-debug-2.2.15-13.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/openldap-debug-2.2.15-13.i586.rpm

Turbolinux openldap-debug-2.2.18-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/openldap-debug-2.2.18-9.x86_64.rpm

Turbolinux openldap-devel-2.2.15-13.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/openldap-devel-2.2.15-13.i586.rpm

Turbolinux openldap-devel-2.2.18-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/openldap-devel-2.2.18-9.x86_64.rpm

Turbolinux openldap-libs-2.2.15-13.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/openldap-libs-2.2.15-13.i586.rpm

Turbolinux openldap-libs-2.2.18-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/openldap-libs-2.2.18-9.x86_64.rpm

Turbolinux openldap-servers-2.2.15-13.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/openldap-servers-2.2.15-13.i586.rpm

Turbolinux openldap-servers-2.2.18-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/openldap-servers-2.2.18-9.x86_64.rpm

Trustix Secure Linux 2.2

Trustix openldap-2.1.30-7tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-devel-2.1.30-7tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-libs-2.1.30-7tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-servers-2.1.30-7tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-utils-2.1.30-7tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix proftpd-1.2.10-11tr.i586.rpm
TSL 2.2
ftp://ftp.trustix.org/pub/trustix/updates

OpenLDAP OpenLDAP 2.2.26

Ubuntu ldap-utils_2.2.26-3ubuntu0.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-3ubuntu0.2_amd64.deb

Ubuntu ldap-utils_2.2.26-3ubuntu0.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-3ubuntu0.2_i386.deb

Ubuntu ldap-utils_2.2.26-3ubuntu0.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-3ubuntu0.2_powerpc.deb

Ubuntu ldap-utils_2.2.26-3ubuntu0.2_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-3ubuntu0.2_sparc.deb

Ubuntu ldap-utils_2.2.26-5ubuntu2.2_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu2.2_amd64.deb

Ubuntu ldap-utils_2.2.26-5ubuntu2.2_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu2.2_i386.deb

Ubuntu ldap-utils_2.2.26-5ubuntu2.2_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu2.2_powerpc.deb

Ubuntu ldap-utils_2.2.26-5ubuntu2.2_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu2.2_sparc.deb

Ubuntu ldap-utils_2.2.26-5ubuntu3.1_amd64.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu3.1_amd64.deb

Ubuntu ldap-utils_2.2.26-5ubuntu3.1_i386.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu3.1_i386.deb

Ubuntu ldap-utils_2.2.26-5ubuntu3.1_powerpc.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu3.1_powerpc.deb

Ubuntu ldap-utils_2.2.26-5ubuntu3.1_sparc.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu3.1_sparc.deb

Ubuntu libldap-2.2-7_2.2.26-3ubuntu0.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-3ubuntu0.2_amd64.deb

Ubuntu libldap-2.2-7_2.2.26-3ubuntu0.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-3ubuntu0.2_i386.deb

Ubuntu libldap-2.2-7_2.2.26-3ubuntu0.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-3ubuntu0.2_powerpc.deb

Ubuntu libldap-2.2-7_2.2.26-3ubuntu0.2_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-3ubuntu0.2_sparc.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu2.2_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu2.2_amd64.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu2.2_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu2.2_i386.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu2.2_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu2.2_powerpc.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu2.2_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu2.2_sparc.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu3.1_amd64.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu3.1_amd64.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu3.1_i386.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu3.1_i386.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu3.1_powerpc.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu3.1_powerpc.deb

Ubuntu libldap-2.2-7_2.2.26-5ubuntu3.1_sparc.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu3.1_sparc.deb

Ubuntu slapd_2.2.26-3ubuntu0.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -3ubuntu0.2_amd64.deb

Ubuntu slapd_2.2.26-3ubuntu0.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -3ubuntu0.2_i386.deb

Ubuntu slapd_2.2.26-3ubuntu0.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -3ubuntu0.2_powerpc.deb

Ubuntu slapd_2.2.26-3ubuntu0.2_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -3ubuntu0.2_sparc.deb

Ubuntu slapd_2.2.26-5ubuntu2.2_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu2.2_amd64.deb

Ubuntu slapd_2.2.26-5ubuntu2.2_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu2.2_i386.deb

Ubuntu slapd_2.2.26-5ubuntu2.2_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu2.2_powerpc.deb

Ubuntu slapd_2.2.26-5ubuntu2.2_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu2.2_sparc.deb

Ubuntu slapd_2.2.26-5ubuntu3.1_amd64.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu3.1_amd64.deb

Ubuntu slapd_2.2.26-5ubuntu3.1_i386.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu3.1_i386.deb

Ubuntu slapd_2.2.26-5ubuntu3.1_powerpc.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu3.1_powerpc.deb

Ubuntu slapd_2.2.26-5ubuntu3.1_sparc.deb
Ubuntu 6.10:
http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu3.1_sparc.deb

OpenLDAP OpenLDAP 2.3.27

Mandriva lib64ldap2.3_0-2.3.27-1.1.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva lib64ldap2.3_0-2.3.27-1.1mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva lib64ldap2.3_0-devel-2.3.27-1.1.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva lib64ldap2.3_0-devel-2.3.27-1.1mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva lib64ldap2.3_0-static-devel-2.3.27-1.1.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva lib64ldap2.3_0-static-devel-2.3.27-1.1mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-2.3.27-1.1.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-2.3.27-1.1mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-devel-2.3.27-1.1.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-devel-2.3.27-1.1mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-static-devel-2.3.27-1.1.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-static-devel-2.3.27-1.1mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.27-1.1.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.27-1.1.20060mlcs4.src.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.27-1.1.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.27-1.1mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.27-1.1mdv2007.0.src.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.27-1.1mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-clients-2.3.27-1.1.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-clients-2.3.27-1.1.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-clients-2.3.27-1.1mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-clients-2.3.27-1.1mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-doc-2.3.27-1.1.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-doc-2.3.27-1.1.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-doc-2.3.27-1.1mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-doc-2.3.27-1.1mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-servers-2.3.27-1.1.20060mlcs4.i586.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-servers-2.3.27-1.1.20060mlcs4.x86_64.rpm
Corporate 4.0:
http://www.mandriva.com/en/download

Mandriva openldap-servers-2.3.27-1.1mdv2007.0.i586.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

Mandriva openldap-servers-2.3.27-1.1mdv2007.0.x86_64.rpm
Mandriva Linux 2007.0:
http://www.mandriva.com/en/download

OpenLDAP OpenLDAP 2.3.6

Mandriva lib64ldap2.3_0-2.3.6-4.3.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva lib64ldap2.3_0-devel-2.3.6-4.3.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva lib64ldap2.3_0-static-devel-2.3.6-4.3.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-2.3.6-4.3.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-devel-2.3.6-4.3.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva libldap2.3_0-static-devel-2.3.6-4.3.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.6-4.3.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.6-4.3.20060mdk.src.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-2.3.6-4.3.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-clients-2.3.6-4.3.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-clients-2.3.6-4.3.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-doc-2.3.6-4.3.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-doc-2.3.6-4.3.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-servers-2.3.6-4.3.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Mandriva openldap-servers-2.3.6-4.3.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download

Trustix Secure Linux 3.0

Trustix openldap-2.2.27-4tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-devel-2.2.27-4tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-libs-2.2.27-4tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-servers-2.2.27-4tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix openldap-utils-2.2.27-4tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix proftpd-1.3.0-3tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates