OpenLDAP BER Decoding Remote Denial of Service Vulnerability

OpenLDAP BER Decoding Remote Denial of Service Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

OpenLDAP OpenLDAP 2.3.27-2.20061018

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

Debian Linux 4.0 amd64

Debian ldap-utils_2.3.30-5+etch2_amd64.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/ldap-utils_ 2.3.30-5+etch2_amd64.deb

Debian libldap-2.3-0_2.3.30-5+etch2_amd64.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/libldap-2.3 -0_2.3.30-5+etch2_amd64.deb

Debian slapd_2.3.30-5+etch2_amd64.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/slapd_2.3.3 0-5+etch2_amd64.deb

Debian Linux 4.0 ia-32

Debian ldap-utils_2.3.30-5+etch2_i386.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/ldap-utils_ 2.3.30-5+etch2_i386.deb

Debian libldap-2.3-0_2.3.30-5+etch2_i386.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/libldap-2.3 -0_2.3.30-5+etch2_i386.deb

Debian slapd_2.3.30-5+etch2_i386.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/slapd_2.3.3 0-5+etch2_i386.deb

Debian Linux 4.0 mips

Debian ldap-utils_2.3.30-5+etch2_mips.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/ldap-utils_ 2.3.30-5+etch2_mips.deb

Debian libldap-2.3-0_2.3.30-5+etch2_mips.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/libldap-2.3 -0_2.3.30-5+etch2_mips.deb

Debian slapd_2.3.30-5+etch2_mips.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/slapd_2.3.3 0-5+etch2_mips.deb

Debian Linux 4.0 arm

Debian ldap-utils_2.3.30-5+etch2_arm.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/ldap-utils_ 2.3.30-5+etch2_arm.deb

Debian libldap-2.3-0_2.3.30-5+etch2_arm.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/libldap-2.3 -0_2.3.30-5+etch2_arm.deb

Debian slapd_2.3.30-5+etch2_arm.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/slapd_2.3.3 0-5+etch2_arm.deb

Debian Linux 4.0 powerpc

Debian ldap-utils_2.3.30-5+etch2_powerpc.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/ldap-utils_ 2.3.30-5+etch2_powerpc.deb

Debian libldap-2.3-0_2.3.30-5+etch2_powerpc.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/libldap-2.3 -0_2.3.30-5+etch2_powerpc.deb

Debian slapd_2.3.30-5+etch2_powerpc.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/slapd_2.3.3 0-5+etch2_powerpc.deb

Debian Linux 4.0 sparc

Debian ldap-utils_2.3.30-5+etch2_sparc.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/ldap-utils_ 2.3.30-5+etch2_sparc.deb

Debian libldap-2.3-0_2.3.30-5+etch2_sparc.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/libldap-2.3 -0_2.3.30-5+etch2_sparc.deb

Debian slapd_2.3.30-5+etch2_sparc.deb
http://security.debian.org/pool/updates/main/o/openldap2.3/slapd_2.3.3 0-5+etch2_sparc.deb

OpenLDAP OpenLDAP 2.3.28-20061022

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.3.28-2.20061022

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

Apple Mac OS X 10.4.11

Apple SecUpd2008-005Intel.dmg
For Mac OS X v10.4.11 (Intel)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20387&cat= 1&platform=osx&method=sa/SecUpd2008-005Intel.dmg

Apple SecUpd2008-005PPC.dmg
For Mac OS X v10.4.11 (PPC)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20386&cat= 1&platform=osx&method=sa/SecUpd2008-005PPC.dmg

Apple Mac OS X Server 10.4.11

Apple SecUpdSrvr2008-005PPC.dmg
For Mac OS X Server v10.4.11 (PPC)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20384&cat= 1&platform=osx&method=sa/SecUpdSrvr2008-005PPC.dmg

Apple SecUpdSrvr2008-005Univ.dmg
For Mac OS X Server v10.4.11 (Universal)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20385&cat= 1&platform=osx&method=sa/SecUpdSrvr2008-005Univ.dmg

Apple Mac OS X 10.5.4

Apple SecUpd2008-005.dmg
For Mac OS X v10.5.4 and Mac OS X Server 10.5.4
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20388&cat= 1&platform=osx&method=sa/SecUpd2008-005.dmg

OpenLDAP OpenLDAP 2.1.19

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.1.22

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.1.4

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.2.15

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.2.26

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.3.25

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.3.39

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.3.41

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0

OpenLDAP OpenLDAP 2.3.6

OpenLDAP io.c patch 1.121
http://www.openldap.org/devel/cvsweb.cgi/libraries/liblber/io.c.diff?r 1=1.120&r2=1.121&hideattic=1&sortbydate=0