Red Hat Security Advisory: nss_ldap ecurity update
Updated nss_ldap packages are now available for Red Hat Linux Advanced Server 2.1. These updates fix a potential buffer overflow which can occur when nss_ldap is set to configure itself using information stored in DNS as well as a format string bug in logging functions used in pam_ldap. [Updated 09 Jan 2003] Added fixed packages for the Itanium (IA64) architecture. [Updated 06 Feb 2003] Added fixed packages for Advanced Workstation 2.1
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2002-0825US | high7.5 | — | ||
Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code. | ||||
| CVE-2002-0374US | high7.5 | — | ||
Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configu… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.htmlexternal
- http://www.kb.cert.org/vuls/id/738331external
- http://www.padl.com/Articles/PotentialBufferOverflowin.htmlexternal
- http://www.padl.com/OSS/pam_ldap.htmlexternal
- https://access.redhat.com/errata/RHSA-2002:180self
- https://access.redhat.com/security/updates/classification/#importantexternal
- Canonical URLself
Behebungen (4)
- BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180 - BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180 - BehobenRed Hat Linux Advanced Workstation 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180 - BehobenRed Hat Linux Advanced Workstation 2.1
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2002:180
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan