Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Mandrake Local Security Checks >> MDKSA-2002:075: nss_ldap

Vulnerability Assessment Details

MDKSA-2002:075: nss_ldap

Vulnerability Assessment Summary
Check for the version of the nss_ldap package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory MDKSA-2002:075 (nss_ldap).

A buffer overflow vulnerability exists in nss_ldap versions prior to 198. When
nss_ldap is configured without a value for the 'host' keyword, it attempts to
configure itself using SRV records stored in DNS. nss_ldap does not check that
the data returned by the DNS query will fit into an internal buffer, thus
exposing it to an overflow.
A similar issue exists in versions of nss_ldap prior to 199 where nss_ldap does
not check that the data returned by the DNS query has not been truncated by the
resolver libraries to avoid a buffer overflow. This can make nss_ldap attempt to
parse more data than what is actually available, making it vulnerable to a read
buffer overflow.
Finally, a format string bug in the logging function of pam_ldap prior to
version 144 exist.
All users are recommended to upgrade to these updated packages. Note that the
nss_ldap packages for 7.2, 8.0, and Single Network Firewall 7.2 contain the
pam_ldap modules.

Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2002:075
Network Security Threat Level: High

Networks Security ID: 4679

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors