CVE-2011-0704: Input Validation
389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial of service (replica crash) by sending an empty modify request.
Other sources
Andrew Kerr reported that a 389 replica would crash when an empty modify request is sent to it. This can only happen if the 389 server is built with mozldap (not OpenLDAP) and the modify operation is replicated or the server set 'cn=config nsslapd-lastmod: off'.
389 on Fedora 14 and later, as well as Red Hat Enterprise Linux 6, use OpenLDAP, not mozldap, and are thus unaffected. This flaw does not affect Red Hat Directory Server 8.2.
This flaw was caused by the fix for bug #305131 which allowed empty modify operations to proceed through the code.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0704?
CVE-2011-0704 is classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2011-0704?
To fix CVE-2011-0704, you should upgrade the 389 Directory Server to a version that is not vulnerable to the empty modify request issue.
Who is affected by CVE-2011-0704?
CVE-2011-0704 affects users of 389 Directory Server version 1.2.7.5 built with mozldap.
What type of attack does CVE-2011-0704 involve?
CVE-2011-0704 involves a denial of service attack that crashes the 389 Directory Server replica.
How does the exploit for CVE-2011-0704 work?
The exploit for CVE-2011-0704 works by sending an empty modify request to the 389 Directory Server, causing it to crash.