Bug 157484

Summary:	CAN-2004-1880 openldap DoS
Product:	Red Hat Enterprise Linux 3	Reporter:	Josh Bressers <bressers>
Component:	openldap	Assignee:	Jay Fenlason <fenlason>
Status:	CLOSED NOTABUG	QA Contact:	Jay Turner <jturner>
Severity:	low	Docs Contact:
Priority:	medium
Version:	3.0	CC:	jfeeney, srevivo
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=low,public=20030320,source=cve,reported=20050414
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-08-11 21:37:34 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-05-11 22:25:20 UTC

If slap_passwd_parse returns something != LDAP_SUCCESS the code tries to free
ndn->bv_val but this might be uninitialized and the server segfaults.

http://www.openldap.org/its/index.cgi?findid=2390

Comment 1 Josh Bressers 2005-05-11 22:25:55 UTC

This issue should also affect RHEL2.1