Test Kennung:	1.3.6.1.4.1.25623.1.0.58997
Kategorie:	Red Hat Local Security Checks
Titel:	RedHat Security Advisory RHSA-2007:1038
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory RHSA-2007:1038. OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. A flaw was found in the way OpenLDAP's slapd daemon handled malformed objectClasses LDAP attributes. An authenticated local or remote attacker could create an LDAP request which could cause a denial of service by crashing slapd. (CVE-2007-5707) In addition, the following feature was added: * OpenLDAP client tools now have new option to configure their bind timeout. All users are advised to upgrade to these updated openldap packages, which contain a backported patch to correct this issue and provide this security enhancement. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-1038.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 7.1
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5707 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html BugTraq ID: 26245 http://www.securityfocus.com/bid/26245 Debian Security Information: DSA-1541 (Google Search) http://www.debian.org/security/2008/dsa-1541 http://www.redhat.com/archives/fedora-package-announce/2007-November/msg00460.html http://security.gentoo.org/glsa/glsa-200803-28.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:215 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5119 http://www.openldap.org/lists/openldap-announce/200710/msg00001.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10183 http://www.redhat.com/support/errata/RHSA-2007-1037.html http://www.redhat.com/support/errata/RHSA-2007-1038.html http://www.securitytracker.com/id?1018924 http://secunia.com/advisories/27424 http://secunia.com/advisories/27587 http://secunia.com/advisories/27596 http://secunia.com/advisories/27683 http://secunia.com/advisories/27756 http://secunia.com/advisories/27868 http://secunia.com/advisories/29461 http://secunia.com/advisories/29682 SuSE Security Announcement: SUSE-SR:2007:024 (Google Search) http://www.novell.com/linux/security/advisories/2007_24_sr.html http://www.ubuntu.com/usn/usn-551-1 http://www.vupen.com/english/advisories/2007/3645 http://www.vupen.com/english/advisories/2009/3184
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.