OpenLDAP多个未明任意代码执行漏洞

漏洞信息详情

OpenLDAP多个未明任意代码执行漏洞

• CNNVD编号：CNNVD-200301-004
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2002-1379
  
• 漏洞类型：
  
  
  未知
  
• 发布时间：
  
  2003-01-02
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  openldap
• 漏洞来源：
  SuSE Security Advi…

OpenLDAP是美国OpenLDAP基金会的一个轻型目录访问协议（LDAP）的自由和开源实现，它已被包含在Linux发行版中。
OpenLDAP存在多个未明漏洞，远程攻击者可以利用这些漏洞在OpenLDAP服务器上执行任意代码。
目前没有获得详细漏洞细节。

厂商补丁：
Conectiva
———
Conectiva已经为此发布了一个安全公告(CLA-2002:556)以及相应补丁:

CLA-2002:556：openldap

链接：http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000556” target=”_blank”>
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000556

补丁下载：

Conectiva RPM openldap2-2.0.21-1U60_2cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openldap2-2.0.21-1U60_2cl.i386.rpm

Conectiva RPM openldap2-devel-2.0.21-1U60_2cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openldap2-devel-2.0.21-1U60_2cl.i386.rpm

Conectiva RPM openldap2-tests-2.0.21-1U60_2cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openldap2-tests-2.0.21-1U60_2cl.i386.rpm

Conectiva RPM openldap-2.0.25-1U70_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openldap-2.0.25-1U70_3cl.i386.rpm

Conectiva RPM openldap-client-2.0.25-1U70_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openldap-client-2.0.25-1U70_3cl.i386.rpm

Conectiva RPM openldap-devel-2.0.25-1U70_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openldap-devel-2.0.25-1U70_3cl.i386.rpm

Conectiva RPM openldap-devel-static-2.0.25-1U70_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openldap-devel-static-2.0.25-1U70_3cl.i386.rpm

Conectiva RPM openldap-doc-2.0.25-1U70_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openldap-doc-2.0.25-1U70_3cl.i386.rpm

Conectiva RPM openldap-server-2.0.25-1U70_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openldap-server-2.0.25-1U70_3cl.i386.rpm

Conectiva RPM openldap-2.0.25-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/openldap-2.0.25-1U80_3cl.i386.rpm

Conectiva RPM openldap-client-2.0.25-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/openldap-client-2.0.25-1U80_3cl.i386.rpm

Conectiva RPM openldap-devel-2.0.25-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/openldap-devel-2.0.25-1U80_3cl.i386.rpm

Conectiva RPM openldap-devel-static-2.0.25-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/openldap-devel-static-2.0.25-1U80_3cl.i386.rpm

Conectiva RPM openldap-doc-2.0.25-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/openldap-doc-2.0.25-1U80_3cl.i386.rpm

Conectiva RPM openldap-server-2.0.25-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/openldap-server-2.0.25-1U80_3cl.i386.rpm
Debian
——
Debian已经为此发布了一个安全公告(DSA-227-1)以及相应补丁:

DSA-227-1：New openldap packages fix buffer overflows and remote exploit

链接：http://www.debian.org/security/2002/dsa-227” target=”_blank”>
http://www.debian.org/security/2002/dsa-227

补丁下载：

Source archives:

http://security.debian.org/pool/updates/main/o/openldap2/openldap2_2.0.23-6.3.dsc” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/openldap2_2.0.23-6.3.dsc

Size/MD5 checksum: 763 45168fb49d17bcbefc2d920400705ac1

http://security.debian.org/pool/updates/main/o/openldap2/openldap2_2.0.23-6.3.diff.gz” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/openldap2_2.0.23-6.3.diff.gz

Size/MD5 checksum: 20913 f0fa8fa225ccd5ce44504811511c9ad4

http://security.debian.org/pool/updates/main/o/openldap2/openldap2_2.0.23.orig.tar.gz” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/openldap2_2.0.23.orig.tar.gz

Size/MD5 checksum: 1302928 d13cfded502c7d2b43b3c42b4e6dd599

Alpha architecture:

http://security.debian.org/pool/updates/main/o/openldap2/ldap-gateways_2.0.23-6.3_alpha.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/ldap-gateways_2.0.23-6.3_alpha.deb

Size/MD5 checksum: 87630 29068d6586e62aa8141995d19d85b5f2

http://security.debian.org/pool/updates/main/o/openldap2/ldap-utils_2.0.23-6.3_alpha.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/ldap-utils_2.0.23-6.3_alpha.deb

Size/MD5 checksum: 113812 ffe2c1b7afd49bbd45143b4d2c5738a3

http://security.debian.org/pool/updates/main/o/openldap2/libldap2_2.0.23-6.3_alpha.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/libldap2_2.0.23-6.3_alpha.deb

Size/MD5 checksum: 213992 5a20e5fa07a7e64c501fce960bafb00d

http://security.debian.org/pool/updates/main/o/openldap2/libldap2-dev_2.0.23-6.3_alpha.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/libldap2-dev_2.0.23-6.3_alpha.deb

Size/MD5 checksum: 1833542 4554c75be54f37f98062874c1fd05ef3

http://security.debian.org/pool/updates/main/o/openldap2/slapd_2.0.23-6.3_alpha.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/slapd_2.0.23-6.3_alpha.deb

Size/MD5 checksum: 806478 e3ebfb7fefffdebdfc48127c53989b5a

ARM architecture:

http://security.debian.org/pool/updates/main/o/openldap2/ldap-gateways_2.0.23-6.3_arm.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/ldap-gateways_2.0.23-6.3_arm.deb

Size/MD5 checksum: 65998 395356a67fc07a37cb7ff83e4f433f08

http://security.debian.org/pool/updates/main/o/openldap2/ldap-utils_2.0.23-6.3_arm.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/ldap-utils_2.0.23-6.3_arm.deb

Size/MD5 checksum: 90090 2d6582bca66d8d4975767e9143610617

http://security.debian.org/pool/updates/main/o/openldap2/libldap2_2.0.23-6.3_arm.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/libldap2_2.0.23-6.3_arm.deb

Size/MD5 checksum: 183032 202e9ee365ea54dab60b7b827d47b759

http://security.debian.org/pool/updates/main/o/openldap2/libldap2-dev_2.0.23-6.3_arm.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/libldap2-dev_2.0.23-6.3_arm.deb

Size/MD5 checksum: 1789034 7144479db1c2c8433fcd89ee6b1cd693

http://security.debian.org/pool/updates/main/o/openldap2/slapd_2.0.23-6.3_arm.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/o/openldap2/slapd_2.0.23-6.3_arm.deb

Size/MD5 checksum: 672624 d93eddf64b805fe8ad456e1abb477237

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/o/openld