Bug 162792

Summary:	CAN-2005-2069 OpenLDAP TLS Plaintext Password Vulnerability
Product:	[Retired] Fedora Legacy	Reporter:	John Dalbec <jpdalbec>
Component:	openldap	Assignee:	Fedora Legacy Bugs <bugs>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rhl7.3
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
URL:	http://www.securityfocus.com/advisories/8783
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-08-30 19:57:17 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description John Dalbec 2005-07-08 18:04:48 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.2) Gecko/20040804 Netscape/7.2 (ax)

Description of problem:
05.27.16 CVE: CAN-2005-2069
Platform: Cross Platform
Title: OpenLDAP TLS Plaintext Password Vulnerability
Description: OpenLDAP is a LDAP protocol implementation. It is
vulnerable to a password disclosure issue when used with TLS. An
attacker could sniff network traffic to obtain user credentials.
OpenLDAP version 2.1.25 is vulnerable.
Ref: http://www.securityfocus.com/advisories/8783 

Version-Release number of selected component (if applicable):


How reproducible:
Didn't try


Additional info:

Comment 1 Jesse Keating 2007-08-30 19:57:17 UTC

Fedora Legacy project has ended.  These will not be fixed by Fedora Legacy.