CVE-2011-1081: Medium severity red hat openldap servers vulnerability
It was reported [1],[2] that OpenLDAP's slapd daemon would crash when it received a request to modify a DN and submits an empty old DN in the request. No binding is necessary, so even an anonymous user could cause slapd to crash.
This was reported against OpenLDAP 2.4.23 and was fixed in 2.4.24 [3].
References:
[1] http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6768 [2] https://bugzilla.novell.com/showbug.cgi?id=674985#c1 [3] http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/modrdn.c.diff?r1=1.170.2.8&r2=1.170.2.9
Other sources
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1081?
CVE-2011-1081 is classified as a critical vulnerability due to the potential for denial of service.
How do I fix CVE-2011-1081?
To fix CVE-2011-1081, upgrade OpenLDAP to version 2.4.24 or later.
What are the affected versions of OpenLDAP for CVE-2011-1081?
CVE-2011-1081 affects OpenLDAP versions 2.4.6 to 2.4.23.
Can an anonymous user exploit CVE-2011-1081?
Yes, an anonymous user can exploit CVE-2011-1081 to crash the slapd daemon.
What is the impact of CVE-2011-1081 on OpenLDAP?
The impact of CVE-2011-1081 is that it can cause the OpenLDAP slapd daemon to crash, leading to service interruption.