First published: Wed Jun 13 2012(Updated: )
Due to a problem with the patch used to correct a problem with LDAP servers not correctly returning an opaque cookie to check for additional results when getting paged results from a server on 64-bit PowerPC and IBM System z platforms (RHBA-2012:0264), it was possible for a user to cause a denial of service of the autofs service. While this may not impact mounts that have already been mounted (other than preventing mount expiration), it will prevent any future mount requests from being processed until autofs is restarted.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Enterprise Linux | =5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-2697 is classified as a high severity vulnerability due to its potential to cause a denial of service.
To fix CVE-2012-2697, you should apply the latest security updates provided by Red Hat for your version of Enterprise Linux.
CVE-2012-2697 affects 64-bit PowerPC and IBM System z platforms running Red Hat Enterprise Linux 5.
CVE-2012-2697 can be exploited to cause a denial of service by manipulating LDAP server responses.
CVE-2012-2697 was first reported in 2012 following issues with LDAP server paging results.