• info
• discussion
• exploit
• solution
• references

OpenLDAP Denial of Service Vulnerabilities

Solution:
These issues have been rectified in the released version of OpenLDAP 1.2.12 for use in LDAPv2 environments, or OpenLDAP 2.0.8 for use in LDAPv3 environments:


OpenLDAP OpenLDAP 1.2.10

• Conectiva 4.1 i386 openldap-1.2.12-1U41_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.1/i386/openldap-1.2.12-1U41_1cl. i386.rpm


• Conectiva 4.1 i386 openldap-devel-1.2.12-1U41_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.1/i386/openldap-devel-1.2.12-1U4 1_1cl.i386.rpm


• Conectiva 4.2 i386 openldap-1.2.12-1U42_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.2/i386/openldap-1.2.12-1U42_1cl. i386.rpm


• Conectiva 4.2 i386 openldap-devel-1.2.12-1U42_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/4.2/i386/openldap-devel-1.2.12-1U4 2_1cl.i386.rpm


• Conectiva 5.0 i386 openldap-1.2.12-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/openldap-1.2.12-1U50_1cl. i386.rpm


• Conectiva 5.0 i386 openldap-devel-1.2.12-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/openldap-devel-1.2.12-1U5 0_1cl.i386.rpm


• Conectiva 5.1 i386 openldap-1.2.12-1U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/openldap-1.2.12-1U51_1cl. i386.rpm


• Conectiva 5.1 i386 openldap-devel-1.2.12-1U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/openldap-devel-1.2.12-1U5 1_1cl.i386.rpm


• Conectiva graficas i386 openldap-1.2.12-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/openldap -1.2.12-1U50_1cl.i386.rpm

OpenLDAP OpenLDAP 1.2.11

• Conectiva 7.0 i386 openldap1-1.2.12-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openldap1-1.2.12-1U70_1cl .i386.rpm


• Conectiva ecommerce i386 openldap-1.2.12-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/openlda p-1.2.12-1U50_1cl.i386.rpm


• Conectiva ecommerce i386 openldap-devel-1.2.12-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/openlda p-devel-1.2.12-1U50_1cl.i386.rpm


• Conectiva graficas i386 openldap-devel-1.2.12-1U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/openldap -devel-1.2.12-1U50_1cl.i386.rpm


• Debian 2.2 alpha libopenldap-dev_1.2.12-1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libo penldap-dev_1.2.12-1_alpha.deb


• Debian 2.2 alpha libopenldap1_1.2.12-1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/libo penldap1_1.2.12-1_alpha.deb


• Debian 2.2 alpha openldap-gateways_1.2.12-1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/open ldap-gateways_1.2.12-1_alpha.deb


• Debian 2.2 alpha openldap-utils_1.2.12-1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/open ldap-utils_1.2.12-1_alpha.deb


• Debian 2.2 alpha openldapd_1.2.12-1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/open ldapd_1.2.12-1_alpha.deb


• Debian 2.2 arm libopenldap-dev_1.2.12-1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libope nldap-dev_1.2.12-1_arm.deb


• Debian 2.2 arm libopenldap1_1.2.12-1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/libope nldap1_1.2.12-1_arm.deb


• Debian 2.2 arm openldap-gateways_1.2.12-1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/openld ap-gateways_1.2.12-1_arm.deb


• Debian 2.2 arm openldap-utils_1.2.12-1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/openld ap-utils_1.2.12-1_arm.deb


• Debian 2.2 arm openldapd_1.2.12-1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/openld apd_1.2.12-1_arm.deb


• Debian 2.2 i386 libopenldap-dev_1.2.12-1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libop enldap-dev_1.2.12-1_i386.deb


• Debian 2.2 i386 libopenldap1_1.2.12-1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/libop enldap1_1.2.12-1_i386.deb


• Debian 2.2 i386 openldap-gateways_1.2.12-1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/openl dap-gateways_1.2.12-1_i386.deb


• Debian 2.2 i386 openldap-utils_1.2.12-1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/openl dap-utils_1.2.12-1_i386.deb


• Debian 2.2 i386 openldapd_1.2.12-1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/openl dapd_1.2.12-1_i386.deb


• Debian 2.2 m68k libopenldap-dev_1.2.12-1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/libop enldap-dev_1.2.12-1_m68k.deb


• Debian 2.2 m68k libopenldap1_1.2.12-1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/libop enldap1_1.2.12-1_m68k.deb


• Debian 2.2 m68k openldap-gateways_1.2.12-1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/openl dap-gateways_1.2.12-1_m68k.deb


• Debian 2.2 m68k openldap-utils_1.2.12-1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/openl dap-utils_1.2.12-1_m68k.deb


• Debian 2.2 m68k openldapd_1.2.12-1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/openl dapd_1.2.12-1_m68k.deb


• Debian 2.2 noarch ldap-rfc_1.2.12-1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/ldap-r fc_1.2.12-1_all.deb


• Debian 2.2 noarch libopenldap-runtime_1.2.12-1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/libope nldap-runtime_1.2.12-1_all.deb


• Debian 2.2 ppc libopenldap-dev_1.2.12-1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bopenldap-dev_1.2.12-1_powerpc.deb


• Debian 2.2 ppc libopenldap1_1.2.12-1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/li bopenldap1_1.2.12-1_powerpc.deb


• Debian 2.2 ppc openldap-gateways_1.2.12-1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/op enldap-gateways_1.2.12-1_powerpc.deb


• Debian 2.2 ppc openldap-utils_1.2.12-1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/op enldap-utils_1.2.12-1_powerpc.deb


• Debian 2.2 ppc openldapd_1.2.12-1_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/op enldapd_1.2.12-1_powerpc.deb


• Debian 2.2 sparc libopenldap-dev_1.2.12-1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libo penldap-dev_1.2.12-1_sparc.deb


• Debian 2.2 sparc libopenldap1_1.2.12-1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/libo penldap1_1.2.12-1_sparc.deb


• Debian 2.2 sparc openldap-gateways_1.2.12-1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/open ldap-gateways_1.2.12-1_sparc.deb


• Debian 2.2 sparc openldap-utils_1.2.12-1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/open ldap-utils_1.2.12-1_sparc.deb


• Debian 2.2 sparc openldapd_1.2.12-1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/open ldapd_1.2.12-1_sparc.deb


• OpenLDAP OpenLDAP 1.2.12
  ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-1.2.12.t gz

OpenLDAP OpenLDAP 1.2.9

• Mandrake 1.0.1 i586 openldap-1.2.12-1.3mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/1.0.1/RPMS /openldap-1.2.12-1.3mdk.i586.rpm


• Mandrake 1.0.1 i586 openldap-devel-1.2.12-1.3mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/1.0.1/RPMS /openldap-devel-1.2.12-1.3mdk.i586.rpm


• Mandrake 7.1 i586 openldap-1.2.12-1.3mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/o penldap-1.2.12-1.3mdk.i586.rpm


• Mandrake 7.1 i586 openldap-devel-1.2.12-1.3mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/o penldap-devel-1.2.12-1.3mdk.i586.rpm


• Mandrake 7.2 i586 openldap-1.2.12-1.2mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/o penldap-1.2.12-1.2mdk.i586.rpm


• Mandrake 7.2 i586 openldap-devel-1.2.12-1.2mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/o penldap-devel-1.2.12-1.2mdk.i586.rpm


• Mandrake 8.0 i586 libldap1-1.2.12-1.1mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/l ibldap1-1.2.12-1.1mdk.i586.rpm


• Mandrake 8.0 i586 libldap1-devel-1.2.12-1.1mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/8.0/RPMS/l ibldap1-devel-1.2.12-1.1mdk.i586.rpm


• Mandrake snf7.2 i586 openldap-1.2.12-1.2mdk.i586.rpm
  ftp://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/snf7.2/RPM S/openldap-1.2.12-1.2mdk.i586.rpm


• RedHat 6.2 alpha openldap-1.2.12-3.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/openldap-1.2.12-3.alpha.rpm


• RedHat 6.2 alpha openldap-devel-1.2.12-3.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/openldap-devel-1.2.12-3.alpha .rpm


• RedHat 6.2 alpha openldap-servers-1.2.12-3.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/openldap-servers-1.2.12-3.alp ha.rpm


• RedHat 6.2 i386 openldap-1.2.12-3.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/openldap-1.2.12-3.i386.rpm


• RedHat 6.2 i386 openldap-clients-1.2.12-3.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/openldap-clients-1.2.12-3.i386 .rpm


• RedHat 6.2 i386 openldap-devel-1.2.12-3.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/openldap-devel-1.2.12-3.i386.r pm


• RedHat 6.2 i386 openldap-servers-1.2.12-3.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/openldap-servers-1.2.12-3.i386 .rpm


• RedHat 6.2 sparc openldap-1.2.12-3.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/openldap-1.2.12-3.sparc.rpm


• RedHat 6.2 sparc openldap-clients-1.2.12-3.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/openldap-clients-1.2.12-3.spa rc.rpm


• RedHat 6.2 sparc openldap-devel-1.2.12-3.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/openldap-devel-1.2.12-3.sparc .rpm


• RedHat 6.2 sparc openldap-servers-1.2.12-3.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/openldap-servers-1.2.12-3.spa rc.rpm

OpenLDAP OpenLDAP 2.0.7

• OpenLDAP OpenLDAP 2.0.8
  ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.0.8.tg z