CVE

Id
5762  
CVE No.
CVE-2002-1378  
Status
Candidate  
Description
Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.  
Phase
Modified (20071017)  
Votes
ACCEPT(2) Cole, Green | MODIFY(1) Cox | NOOP(1) Christey  
Comments
Cox> Addref: REDHAT:RHSA-2002:312 | Christey> REDHAT:RHSA-2002:312  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
32208 5762 CVE-2002-1378 MISC:http://www.linuxsecurity.com/advisories/gentoo_advisory-2704.html  View
32209 5762 CVE-2002-1378 CONECTIVA:CLA-2002:556  View
32210 5762 CVE-2002-1378 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000556  View
32211 5762 CVE-2002-1378 DEBIAN:DSA-227  View
32212 5762 CVE-2002-1378 URL:http://www.debian.org/security/2003/dsa-227  View
32213 5762 CVE-2002-1378 GENTOO:200212-12  View
32214 5762 CVE-2002-1378 URL:http://www.securityfocus.com/advisories/4827  View
32215 5762 CVE-2002-1378 MANDRAKE:MDKSA-2003:006  View
32216 5762 CVE-2002-1378 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:006  View
32217 5762 CVE-2002-1378 REDHAT:RHSA-2003:040  View
32218 5762 CVE-2002-1378 URL:http://www.redhat.com/support/errata/RHSA-2003-040.html  View
32219 5762 CVE-2002-1378 SUSE:SuSE-SA:2002:047  View
32220 5762 CVE-2002-1378 URL:http://www.novell.com/linux/security/advisories/2002_047_openldap2.html  View
32221 5762 CVE-2002-1378 TURBO:TLSA-2003-5  View
32222 5762 CVE-2002-1378 URL:http://www.turbolinux.com/security/TLSA-2003-5.txt  View
32223 5762 CVE-2002-1378 CIAC:N-043  View
32224 5762 CVE-2002-1378 URL:http://www.ciac.org/ciac/bulletins/n-043.shtml  View
32225 5762 CVE-2002-1378 BID:6328  View
32226 5762 CVE-2002-1378 URL:http://www.securityfocus.com/bid/6328  View
32227 5762 CVE-2002-1378 XF:openldap-multiple-bo(10800)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63977 JVNDB-2002-000304 OpenLDAP2 における複数のバッファオーバーフローの脆弱性 ------------ CVE-2002-1378 5762 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000304.html  View