Red Hat Bugzilla – Bug 432008
CVE-2008-0658 openldap: slapd crash on modrdn operation with NOOP control on entry in bdb storage
Last modified: 2008-02-22 03:45:14 EST
While preparing the patch for CVE-2007-6698 (issue allowing slapd daemon crash
using modify requests with NOOP control, tracked via bug bug #431203), it was
discovered, that similar crash can be achieved using modrdn operation with NOOP
Upstream bug report:
Patch applied in upstream CVS:
Similar to CVE-2007-6698, this issue does not affect OpenLDAP packages as
shipped in Red Hat Enterprise Linux 2.1 and 3, as they do not support NOOP
controls. Packages shipped in Red Hat Enterprise Linux 4 and 5 are affected.
openldap-2.3.39-3.fc8 has been submitted as an update for Fedora 8
openldap-2.3.34-7.fc7 has been submitted as an update for Fedora 7
openldap-2.3.39-3.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.
openldap-2.3.34-7.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report.
This issue was addressed in:
Red Hat Enterprise Linux: