Multiple Vendor LDAP Remote Buffer Overflow Vulnerability
BID:12099
Info
Multiple Vendor LDAP Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 12099 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-1236 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 22 2004 12:00AM |
| Updated: | Jul 12 2009 09:26AM |
| Credit: | The researcher responsible for discovering this issue is currently unknown. |
| Vulnerable: |
Sun ONE Directory Server 5.1 x86 Sun ONE Directory Server 5.1 SP3 x86 Sun ONE Directory Server 5.1 SP3 Sun ONE Directory Server 5.1 SP2 Sun ONE Directory Server 5.1 SP1 Sun ONE Directory Server 5.1 Sun Java System Directory Server 5.2 Netscape Directory Server 6.21 Netscape Directory Server 6.11 Netscape Directory Server 6.2 Netscape Directory Server 6.1 Netscape Directory Server 6.0 2 Netscape Directory Server 6.0 1 Netscape Directory Server 6.0 Netscape Directory Server 4.13 Netscape Directory Server 4.12 Netscape Directory Server 4.11 Netscape Directory Server 4.1 Netscape Directory Server 3.12 Netscape Directory Server 3.1 P1 Netscape Directory Server 1.3 P5 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00 Hitachi Directory Server Version 2 P-2444-A124 02-11-/H Hitachi Directory Server Version 2 P-2444-A124 02-11-/G Hitachi Directory Server Version 2 P-2444-A124 02-11-/F Hitachi Directory Server Version 2 P-2444-A124 02-11 Hitachi Directory Server Version 2 P-2444-A124 02-10-/D Hitachi Directory Server Version 2 P-2444-A124 02-10 Hitachi Directory Server Version 2 P-2444-A124 02-01 Hitachi Directory Server Version 2 P-2444-A124 02-00 Hitachi Directory Server Version 2 P-1B44-A121 02-10-/S Hitachi Directory Server Version 2 P-1B44-A121 02-10-/Q Hitachi Directory Server Version 2 P-1B44-A121 02-10-/P Hitachi Directory Server Version 2 P-1B44-A121 02-10 Hitachi Directory Server Version 2 P-1B44-A121 02-01 Hitachi Directory Server Version 2 P-1B44-A121 02-00 |
| Not Vulnerable: | |
Discussion
Multiple Vendor LDAP Remote Buffer Overflow Vulnerability
Multiple Vendor implementations of the LDAP protocol are reported prone to a remote buffer overflow vulnerability.
This vulnerability arises because the application does not perform proper boundary checks before copying user-supplied data in to process buffers. As a result an attacker can supply a payload containing excessive string data to overflow static buffers leading to memory corruption.
This issue was originally written as a vulnerability in HP-UX Netscape Directory Server With LDAP, however, new information suggests that multiple vendors are affected by this vulnerability.
Hitachi has confirmed this issue in various versions of Hitachi Directory Server Version 2.
Red Hat has identified this issue in Netscape Directory Server 6.21 and earlier.
HP has confirmed this issue in various versions of HP-UX.
Multiple Vendor implementations of the LDAP protocol are reported prone to a remote buffer overflow vulnerability.
This vulnerability arises because the application does not perform proper boundary checks before copying user-supplied data in to process buffers. As a result an attacker can supply a payload containing excessive string data to overflow static buffers leading to memory corruption.
This issue was originally written as a vulnerability in HP-UX Netscape Directory Server With LDAP, however, new information suggests that multiple vendors are affected by this vulnerability.
Hitachi has confirmed this issue in various versions of Hitachi Directory Server Version 2.
Red Hat has identified this issue in Netscape Directory Server 6.21 and earlier.
HP has confirmed this issue in various versions of HP-UX.
Exploit / POC
Multiple Vendor LDAP Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Multiple Vendor LDAP Remote Buffer Overflow Vulnerability
Solution:
HP has released an advisory HPSBUX01105 to address this issue. Please see the referenced advisory for more information.
Red Hat has released advisory RHSA-2005:030-02 to address this issue. Please see the advisory in Web references for more information.
Hitachi has released an advisory HS05-001 identifying vulnerable products and fixes. Please see the advisory in Web references for more information.
Sun has released advisory 57754 and fixes for this issue. Please see the advisory in Web references for more information.
Solution:
HP has released an advisory HPSBUX01105 to address this issue. Please see the referenced advisory for more information.
Red Hat has released advisory RHSA-2005:030-02 to address this issue. Please see the advisory in Web references for more information.
Hitachi has released an advisory HS05-001 identifying vulnerable products and fixes. Please see the advisory in Web references for more information.
Sun has released advisory 57754 and fixes for this issue. Please see the advisory in Web references for more information.
References
Multiple Vendor LDAP Remote Buffer Overflow Vulnerability
References:
References: