OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

References:

[oss-security] More CVE-2009-2408 like issues (Tomas Hoger)
Avaya Security Advisory ASA-2010-117 (Avaya)
Diff for /libraries/libldap/tls_g.c between version 1.13 and 1.14 (OpenLDAP)
Diff for /libraries/libldap/tls_m.c between version 1.8 and 1.11 (OpenLDAP)
Diff for /libraries/libldap/tls_o.c between version 1.8 and 1.11 (OpenLDAP)
OpenLDAP Homepage (OpenLDAP)
VMSA-2010-0015 VMware ESX third party updates for Service Console (VMWare)
RHSA-2010:0543-1 Moderate: openldap security update (Red Hat)

Privacy Statement
Copyright 2010, SecurityFocus