CVE-2014-9713

Related Files

Ubuntu Security Notice USN-2742-1

Posted Sep 17, 2015

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2742-1 - Denis Andzakovic discovered that OpenLDAP incorrectly handled certain BER data. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. Dietrich Clauss discovered that the OpenLDAP package incorrectly shipped with a potentially unsafe default access control configuration. Depending on how the database is configure, this may allow users to impersonate others by modifying attributes such as their Unix user and group numbers. Various other issues were also addressed.

tags | advisory, remote, denial of service

systems | linux, unix, ubuntu

advisories | CVE-2014-9713, CVE-2015-6908

SHA-256 | 9b6a8ed19fb6f7e3f64b01c4aa1fe8b45478ce1971f92272242e7566e492728c

Download | Favorite | View

Debian Security Advisory 3209-1

Posted Mar 31, 2015

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3209-1 - Multiple vulnerabilities were found in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol.

tags | advisory, vulnerability, protocol

systems | linux, debian

advisories | CVE-2013-4449, CVE-2014-9713, CVE-2015-1545

SHA-256 | 783252edc6cdc7f792037cd981fb9a70030843baeac39d7cef0d1682ead9207d

Download | Favorite | View