CVE-2008-0658: Medium severity red hat openldap servers vulnerability

Published Feb 13, 2008

Updated

slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAPXNOOPERATION) control, a related issue to CVE-2007-6698.

Affected Software

1 affected component

openldap OpenLDAP=2.3.39

Event History

Feb 13, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0658?

CVE-2008-0658 is classified as a denial of service vulnerability where remote authenticated users can crash the OpenLDAP daemon.

How do I fix CVE-2008-0658?

To fix CVE-2008-0658, upgrade OpenLDAP to a version later than 2.3.39 that includes the patch for this vulnerability.

What versions of OpenLDAP are affected by CVE-2008-0658?

OpenLDAP version 2.3.39 is explicitly affected by CVE-2008-0658.

Can CVE-2008-0658 be exploited remotely?

Yes, CVE-2008-0658 can be exploited remotely by authenticated users who perform a specific modrdn operation.

What is the type of vulnerability in CVE-2008-0658?

CVE-2008-0658 is a denial of service vulnerability related to the modrdn operation in the BDB backend of OpenLDAP.