NVD

Id
11782  
Name
CVE-2010-0211  
Description
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-07-28  
Modified Date
2017-01-06  
Seq
2010-0211  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64899 11782 CVE-2010-0211 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
64900 11782 CVE-2010-0211 APPLE-SA-2010-11-10-1  View
64901 11782 CVE-2010-0211 SUSE-SR:2010:014  View
64902 11782 CVE-2010-0211 GLSA-201406-36  View
64903 11782 CVE-2010-0211 http://support.apple.com/kb/HT4435  View
64904 11782 CVE-2010-0211 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570  View
64905 11782 CVE-2010-0211 RHSA-2010:0542  View
64906 11782 CVE-2010-0211 RHSA-2010:0543  View
64907 11782 CVE-2010-0211 20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap  View
64908 11782 CVE-2010-0211 41770  View
64909 11782 CVE-2010-0211 1024221  View
64910 11782 CVE-2010-0211 http://www.vmware.com/security/advisories/VMSA-2011-0001.html  View
64911 11782 CVE-2010-0211 ADV-2010-1849  View
64912 11782 CVE-2010-0211 ADV-2010-1858  View
64913 11782 CVE-2010-0211 ADV-2011-0025  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36032 JVNDB-2010-001812 OpenLDAP の slap_modrdn2mods 関数における任意のコードを実行される脆弱性 OpenLDAP の modrdn.c 内にある slap_modrdn2mods 関数には、smr_normalize 関数の呼び出しにおいて、戻り値をチェックしないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0211 42791 CVE-2010-0211 11782 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001812.html 2010-06-30 2011-01-14 View