Red Hat Security Advisory: nss_ldap ecurity update
Updated nss_ldap packages are now available for Red Hat Linux Advanced Server 2.1. These updates fix a potential buffer overflow which can occur when nss_ldap is set to configure itself using information stored in DNS as well as a format string bug in logging functions used in pam_ldap. [Updated 09 Jan 2003] Added fixed packages for the Itanium (IA64) architecture. [Updated 06 Feb 2003] Added fixed packages for Advanced Workstation 2.1
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2002-0825US | high7.5 | — | ||
Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code. | ||||
| CVE-2002-0374US | high7.5 | — | ||
Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configu… | ||||
references
External citations — patches, advisories, analysis.
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.htmlexternal
- http://www.kb.cert.org/vuls/id/738331external
- http://www.padl.com/Articles/PotentialBufferOverflowin.htmlexternal
- http://www.padl.com/OSS/pam_ldap.htmlexternal
- https://access.redhat.com/errata/RHSA-2002:180self
- https://access.redhat.com/security/updates/classification/#importantexternal
- Canonical URLself
remediations (4)
- FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180 - FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180 - FixedRed Hat Linux Advanced Workstation 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180 - FixedRed Hat Linux Advanced Workstation 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan