Summary
OpenLDAP is prone to multiple vulnerabilities.
Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application or cause denial-of- service conditions.
OpenLDAP 2.4.22 is vulnerable
other versions may also be affected.
Solution
The vendor has released an update to address this issue. Please see the references for more information.
References
Severity
Classification
-
CVE CVE-2010-0211, CVE-2010-0212 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- Adobe Flash Player Multiple Security Bypass Vulnerabilities - 01 Feb14 (Mac OS X)
- Adobe Reader Information Disclosure Vulnerability Jun05 (Windows)
- Adobe Reader 'file://' URL Information Disclosure Vulnerability Feb07 (Windows)
- Arora Common Name SSL Certificate Spoofing Vulnerability (Linux)
- Adobe LiveCycle Designer Untrusted Search Path Vulnerability (Windows)