OpenLDAP 'modrdn' Request Multiple Vulnerabilities

Bugtraq ID:	41770
Class:	Unknown
CVE:	CVE-2010-0211 CVE-2010-0212
Remote:	Yes
Local:	No
Published:	Jul 19 2010 12:00AM
Updated:	Jul 06 2016 02:27PM
Credit:	Ilkka Mattila and Tuomas Salom.ki
Vulnerable:	VMWare ESX 4.1 VMWare ESX 4.0 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4.8.z RedHat Enterprise Linux ES 4 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Desktop 4.0 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4.8.z Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux 5 Server OpenLDAP OpenLDAP 2.4.22 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 SP2 Avaya Voice Portal 4.1 SP1 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Proactive Contact 4.1.2 Avaya Proactive Contact 4.1.1 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya IQ 5.1 Avaya IQ 5 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Conferencing Standard Edition 6.0 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 5.2 Avaya Aura SIP Enablement Services 5.2.1 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 3.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 4.0 Avaya Aura SIP Enablement Services 3.1 Avaya Aura SIP Enablement Services 3.0 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Conferencing 6.0 Standard Avaya Aura Communication Manager 6.0 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.1 Avaya Aura Communication Manager 4.0 Avaya Aura Communication Manager 4.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 4.2.3 Avaya Aura Application Enablement Services 4.2.2 Avaya Aura Application Enablement Services 4.2.1 Avaya Aura Application Enablement Services 4.0.1 Avaya Aura Application Enablement Services 5.2 Avaya Aura Application Enablement Services 4.2 Avaya Aura Application Enablement Services 4.1 Avaya Aura Application Enablement Services 4.0 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6
Not Vulnerable:	OpenLDAP OpenLDAP 2.4.23 Apple Mac OS X Server 10.6.5

OpenLDAP 'modrdn' Request Multiple Vulnerabilities

OpenLDAP is prone to multiple vulnerabilities.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application or cause denial-of-service conditions.

OpenLDAP 2.4.22 is vulnerable; other versions may also be affected.

OpenLDAP 'modrdn' Request Multiple Vulnerabilities

The following proofs of concept are available:

ldapmodrdn -x cn=something,dc=anything cn=#80
ldapmodrdn -x dc=something,dc=anything dc=

OpenLDAP 'modrdn' Request Multiple Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu ldap-utils_2.4.18-0ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/ldap-utils_2.4.18-0ubuntu 1.1_powerpc.deb


• Ubuntu libldap-2.4-2-dbg_2.4.18-0ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2-dbg_2.4.18- 0ubuntu1.1_powerpc.deb


• Ubuntu libldap-2.4-2_2.4.18-0ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2_2.4.18-0ubu ntu1.1_powerpc.deb


• Ubuntu libldap2-dev_2.4.18-0ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap2-dev_2.4.18-0ubun tu1.1_powerpc.deb


• Ubuntu slapd-dbg_2.4.18-0ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd-dbg_2.4.18-0ubuntu1 .1_powerpc.deb


• Ubuntu slapd_2.4.18-0ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd_2.4.18-0ubuntu1.1_p owerpc.deb

Debian Linux 5.0 alpha

• Debian ldap-utils_2.4.11-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/o/openldap/ldap-utils_2.4 .11-1+lenny2_alpha.deb


• Debian libldap-2.4-2-dbg_2.4.11-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2- dbg_2.4.11-1+lenny2_alpha.deb


• Debian libldap-2.4-2_2.4.11-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2_ 2.4.11-1+lenny2_alpha.deb


• Debian libldap2-dev_2.4.11-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap2-dev_2 .4.11-1+lenny2_alpha.deb


• Debian slapd-dbg_2.4.11-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd-dbg_2.4. 11-1+lenny2_alpha.deb


• Debian slapd_2.4.11-1+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd_2.4.11-1 +lenny2_alpha.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libldap2.3_0-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libldap2.3_0-devel-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libldap2.3_0-static-devel-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-clients-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-doc-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-servers-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-testprogs-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-tests-2.3.38-3.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu ldap-utils_2.4.18-0ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/ldap-utils_2.4.18-0ubuntu 1.1_lpia.deb


• Ubuntu libldap-2.4-2-dbg_2.4.18-0ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2-dbg_2.4.18- 0ubuntu1.1_lpia.deb


• Ubuntu libldap-2.4-2_2.4.18-0ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2_2.4.18-0ubu ntu1.1_lpia.deb


• Ubuntu libldap2-dev_2.4.18-0ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap2-dev_2.4.18-0ubun tu1.1_lpia.deb


• Ubuntu slapd-dbg_2.4.18-0ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd-dbg_2.4.18-0ubuntu1 .1_lpia.deb


• Ubuntu slapd_2.4.18-0ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd_2.4.18-0ubuntu1.1_l pia.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu ldap-utils_2.4.15-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/ldap-utils_2.4.15-1ubuntu 3.1_sparc.deb


• Ubuntu libldap-2.4-2-dbg_2.4.15-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2-dbg_2.4.15- 1ubuntu3.1_sparc.deb


• Ubuntu libldap-2.4-2_2.4.15-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2_2.4.15-1ubu ntu3.1_sparc.deb


• Ubuntu libldap2-dev_2.4.15-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap2-dev_2.4.15-1ubun tu3.1_sparc.deb


• Ubuntu slapd-dbg_2.4.15-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd-dbg_2.4.15-1ubuntu3 .1_sparc.deb


• Ubuntu slapd_2.4.15-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd_2.4.15-1ubuntu3.1_s parc.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu ldap-utils_2.4.21-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/ldap-utils_2.4.21-0ubuntu 5.2_powerpc.deb


• Ubuntu libldap-2.4-2-dbg_2.4.21-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2-dbg_2.4.21- 0ubuntu5.2_powerpc.deb


• Ubuntu libldap-2.4-2_2.4.21-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2_2.4.21-0ubu ntu5.2_powerpc.deb


• Ubuntu libldap2-dev_2.4.21-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap2-dev_2.4.21-0ubun tu5.2_powerpc.deb


• Ubuntu slapd-dbg_2.4.21-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd-dbg_2.4.21-0ubuntu5 .2_powerpc.deb


• Ubuntu slapd_2.4.21-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd_2.4.21-0ubuntu5.2_p owerpc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu ldap-utils_2.4.15-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/ldap-utils_2.4.15-1ubuntu 3.1_lpia.deb


• Ubuntu libldap-2.4-2-dbg_2.4.15-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2-dbg_2.4.15- 1ubuntu3.1_lpia.deb


• Ubuntu libldap-2.4-2_2.4.15-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2_2.4.15-1ubu ntu3.1_lpia.deb


• Ubuntu libldap2-dev_2.4.15-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap2-dev_2.4.15-1ubun tu3.1_lpia.deb


• Ubuntu slapd-dbg_2.4.15-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd-dbg_2.4.15-1ubuntu3 .1_lpia.deb


• Ubuntu slapd_2.4.15-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd_2.4.15-1ubuntu3.1_l pia.deb

Debian Linux 5.0 armel

• Debian ldap-utils_2.4.11-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/o/openldap/ldap-utils_2.4 .11-1+lenny2_armel.deb


• Debian libldap-2.4-2-dbg_2.4.11-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2- dbg_2.4.11-1+lenny2_armel.deb


• Debian libldap-2.4-2_2.4.11-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2_ 2.4.11-1+lenny2_armel.deb


• Debian libldap2-dev_2.4.11-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap2-dev_2 .4.11-1+lenny2_armel.deb


• Debian slapd-dbg_2.4.11-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd-dbg_2.4. 11-1+lenny2_armel.deb


• Debian slapd_2.4.11-1+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd_2.4.11-1 +lenny2_armel.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu ldap-utils_2.4.18-0ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/ldap-utils_2.4. 18-0ubuntu1.1_amd64.deb


• Ubuntu libldap-2.4-2-dbg_2.4.18-0ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/libldap-2.4-2-d bg_2.4.18-0ubuntu1.1_amd64.deb


• Ubuntu libldap-2.4-2_2.4.18-0ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/libldap-2.4-2_2 .4.18-0ubuntu1.1_amd64.deb


• Ubuntu libldap2-dev_2.4.18-0ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/libldap2-dev_2. 4.18-0ubuntu1.1_amd64.deb


• Ubuntu slapd-dbg_2.4.18-0ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/slapd-dbg_2.4.1 8-0ubuntu1.1_amd64.deb


• Ubuntu slapd_2.4.18-0ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/slapd_2.4.18-0u buntu1.1_amd64.deb

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64ldap2.4_2-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ldap2.4_2-devel-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ldap2.4_2-static-devel-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-clients-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-doc-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-servers-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-testprogs-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-tests-2.4.11-3.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu ldap-utils_2.4.15-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/ldap-utils_2.4. 15-1ubuntu3.1_amd64.deb


• Ubuntu libldap-2.4-2-dbg_2.4.15-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/libldap-2.4-2-d bg_2.4.15-1ubuntu3.1_amd64.deb


• Ubuntu libldap-2.4-2_2.4.15-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/libldap-2.4-2_2 .4.15-1ubuntu3.1_amd64.deb


• Ubuntu libldap2-dev_2.4.15-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/libldap2-dev_2. 4.15-1ubuntu3.1_amd64.deb


• Ubuntu slapd-dbg_2.4.15-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/slapd-dbg_2.4.1 5-1ubuntu3.1_amd64.deb


• Ubuntu slapd_2.4.15-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap/slapd_2.4.15-1u buntu3.1_amd64.deb

Debian Linux 5.0 sparc

• Debian ldap-utils_2.4.11-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/o/openldap/ldap-utils_2.4 .11-1+lenny2_sparc.deb


• Debian libldap-2.4-2-dbg_2.4.11-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2- dbg_2.4.11-1+lenny2_sparc.deb


• Debian libldap-2.4-2_2.4.11-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2_ 2.4.11-1+lenny2_sparc.deb


• Debian libldap2-dev_2.4.11-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap2-dev_2 .4.11-1+lenny2_sparc.deb


• Debian slapd-dbg_2.4.11-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd-dbg_2.4. 11-1+lenny2_sparc.deb


• Debian slapd_2.4.11-1+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd_2.4.11-1 +lenny2_sparc.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva lib64ldap2.4_2-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ldap2.4_2-devel-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ldap2.4_2-static-devel-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-clients-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-doc-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-servers-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-testprogs-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-tests-2.4.16-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva libldap2.4_2-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libldap2.4_2-devel-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libldap2.4_2-static-devel-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-clients-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-doc-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-servers-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-testprogs-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-tests-2.4.11-3.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian ldap-utils_2.4.11-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/o/openldap/ldap-utils_2.4 .11-1+lenny2_s390.deb


• Debian libldap-2.4-2-dbg_2.4.11-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2- dbg_2.4.11-1+lenny2_s390.deb


• Debian libldap-2.4-2_2.4.11-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2_ 2.4.11-1+lenny2_s390.deb


• Debian libldap2-dev_2.4.11-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap2-dev_2 .4.11-1+lenny2_s390.deb


• Debian slapd-dbg_2.4.11-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd-dbg_2.4. 11-1+lenny2_s390.deb


• Debian slapd_2.4.11-1+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd_2.4.11-1 +lenny2_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu ldap-utils_2.4.9-0ubuntu0.8.04.4_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/ldap-utils_2.4.9-0ubun tu0.8.04.4_lpia.deb


• Ubuntu libldap-2.4-2-dbg_2.4.9-0ubuntu0.8.04.4_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap-2.4-2-dbg_2.4. 9-0ubuntu0.8.04.4_lpia.deb


• Ubuntu libldap-2.4-2_2.4.9-0ubuntu0.8.04.4_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap-2.4-2_2.4.9-0u buntu0.8.04.4_lpia.deb


• Ubuntu libldap2-dev_2.4.9-0ubuntu0.8.04.4_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap2-dev_2.4.9-0ub untu0.8.04.4_lpia.deb


• Ubuntu slapd-dbg_2.4.9-0ubuntu0.8.04.4_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/slapd-dbg_2.4.9-0ubunt u0.8.04.4_lpia.deb


• Ubuntu slapd_2.4.9-0ubuntu0.8.04.4_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/slapd_2.4.9-0ubuntu0.8 .04.4_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu ldap-utils_2.2.26-5ubuntu2.10_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu2.10_i386.deb


• Ubuntu libldap-2.2-7_2.2.26-5ubuntu2.10_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu2.10_i386.deb


• Ubuntu slapd_2.2.26-5ubuntu2.10_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu2.10_i386.deb

Debian Linux 5.0 hppa

• Debian ldap-utils_2.4.11-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openldap/ldap-utils_2.4 .11-1+lenny2_hppa.deb


• Debian libldap-2.4-2-dbg_2.4.11-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2- dbg_2.4.11-1+lenny2_hppa.deb


• Debian libldap-2.4-2_2.4.11-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2_ 2.4.11-1+lenny2_hppa.deb


• Debian libldap2-dev_2.4.11-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap2-dev_2 .4.11-1+lenny2_hppa.deb


• Debian slapd-dbg_2.4.11-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd-dbg_2.4. 11-1+lenny2_hppa.deb


• Debian slapd_2.4.11-1+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd_2.4.11-1 +lenny2_hppa.deb

Mandriva Linux Mandrake 2009.0

• Mandriva libldap2.4_2-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libldap2.4_2-devel-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libldap2.4_2-static-devel-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-clients-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-doc-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-servers-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-testprogs-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-tests-2.4.11-3.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu ldap-utils_2.4.9-0ubuntu0.8.04.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.3/ldap-utils_2 .4.9-0ubuntu0.8.04.4_i386.deb


• Ubuntu libldap-2.4-2-dbg_2.4.9-0ubuntu0.8.04.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.3/libldap-2.4- 2-dbg_2.4.9-0ubuntu0.8.04.4_i386.deb


• Ubuntu libldap-2.4-2_2.4.9-0ubuntu0.8.04.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.3/libldap-2.4- 2_2.4.9-0ubuntu0.8.04.4_i386.deb


• Ubuntu libldap2-dev_2.4.9-0ubuntu0.8.04.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.3/libldap2-dev _2.4.9-0ubuntu0.8.04.4_i386.deb


• Ubuntu slapd-dbg_2.4.9-0ubuntu0.8.04.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.3/slapd-dbg_2. 4.9-0ubuntu0.8.04.4_i386.deb


• Ubuntu slapd_2.4.9-0ubuntu0.8.04.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.3/slapd_2.4.9- 0ubuntu0.8.04.4_i386.deb

Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu ldap-utils_2.4.18-0ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/ldap-utils_2.4.18-0ubuntu 1.1_sparc.deb


• Ubuntu libldap-2.4-2-dbg_2.4.18-0ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2-dbg_2.4.18- 0ubuntu1.1_sparc.deb


• Ubuntu libldap-2.4-2_2.4.18-0ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap-2.4-2_2.4.18-0ubu ntu1.1_sparc.deb


• Ubuntu libldap2-dev_2.4.18-0ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/libldap2-dev_2.4.18-0ubun tu1.1_sparc.deb


• Ubuntu slapd-dbg_2.4.18-0ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd-dbg_2.4.18-0ubuntu1 .1_sparc.deb


• Ubuntu slapd_2.4.18-0ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap/slapd_2.4.18-0ubuntu1.1_s parc.deb

Debian Linux 5.0 ia-64

• Debian ldap-utils_2.4.11-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openldap/ldap-utils_2.4 .11-1+lenny2_ia64.deb


• Debian libldap-2.4-2-dbg_2.4.11-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2- dbg_2.4.11-1+lenny2_ia64.deb


• Debian libldap-2.4-2_2.4.11-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap-2.4-2_ 2.4.11-1+lenny2_ia64.deb


• Debian libldap2-dev_2.4.11-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openldap/libldap2-dev_2 .4.11-1+lenny2_ia64.deb


• Debian slapd-dbg_2.4.11-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd-dbg_2.4. 11-1+lenny2_ia64.deb


• Debian slapd_2.4.11-1+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openldap/slapd_2.4.11-1 +lenny2_ia64.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu ldap-utils_2.4.9-0ubuntu0.8.04.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/ldap-utils_2.4.9-0ubun tu0.8.04.4_powerpc.deb


• Ubuntu libldap-2.4-2-dbg_2.4.9-0ubuntu0.8.04.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap-2.4-2-dbg_2.4. 9-0ubuntu0.8.04.4_powerpc.deb


• Ubuntu libldap-2.4-2_2.4.9-0ubuntu0.8.04.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap-2.4-2_2.4.9-0u buntu0.8.04.4_powerpc.deb


• Ubuntu libldap2-dev_2.4.9-0ubuntu0.8.04.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap2-dev_2.4.9-0ub untu0.8.04.4_powerpc.deb


• Ubuntu slapd-dbg_2.4.9-0ubuntu0.8.04.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/slapd-dbg_2.4.9-0ubunt u0.8.04.4_powerpc.deb


• Ubuntu slapd_2.4.9-0ubuntu0.8.04.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/slapd_2.4.9-0ubuntu0.8 .04.4_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu ldap-utils_2.4.9-0ubuntu0.8.04.4_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/ldap-utils_2.4.9-0ubun tu0.8.04.4_sparc.deb


• Ubuntu libldap-2.4-2-dbg_2.4.9-0ubuntu0.8.04.4_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap-2.4-2-dbg_2.4. 9-0ubuntu0.8.04.4_sparc.deb


• Ubuntu libldap-2.4-2_2.4.9-0ubuntu0.8.04.4_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap-2.4-2_2.4.9-0u buntu0.8.04.4_sparc.deb


• Ubuntu libldap2-dev_2.4.9-0ubuntu0.8.04.4_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/libldap2-dev_2.4.9-0ub untu0.8.04.4_sparc.deb


• Ubuntu slapd-dbg_2.4.9-0ubuntu0.8.04.4_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/slapd-dbg_2.4.9-0ubunt u0.8.04.4_sparc.deb


• Ubuntu slapd_2.4.9-0ubuntu0.8.04.4_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openldap2.3/slapd_2.4.9-0ubuntu0.8 .04.4_sparc.deb

Apple Mac OS X Server 10.6

• Apple MacOSXServUpdCombo10.6.5.dmg
  For Mac OS X Server v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu ldap-utils_2.2.26-5ubuntu2.10_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/ldap-utils_2 .2.26-5ubuntu2.10_sparc.deb


• Ubuntu libldap-2.2-7_2.2.26-5ubuntu2.10_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/libldap-2.2- 7_2.2.26-5ubuntu2.10_sparc.deb


• Ubuntu slapd_2.2.26-5ubuntu2.10_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openldap2.2/slapd_2.2.26 -5ubuntu2.10_sparc.deb

Apple Mac OS X 10.6.1

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.3

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.4

• Apple MacOSXUpd10.6.5.dmg
  For Mac OS X v10.6.4
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.4

• Apple MacOSXServerUpd10.6.5.dmg
  For Mac OS X Server v10.6.4
  http://www.apple.com/support/downloads/

OpenLDAP OpenLDAP 2.4.22

• OpenLDAP openldap-2.4.23.tgz
  ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.23.t gz

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva lib64ldap2.3_0-2.3.27-1.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ldap2.3_0-devel-2.3.27-1.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64ldap2.3_0-static-devel-2.3.27-1.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-2.3.27-1.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-clients-2.3.27-1.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-doc-2.3.27-1.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openldap-servers-2.3.27-1.7.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

OpenLDAP 'modrdn' Request Multiple Vulnerabilities

References:

• Avaya Security ADvisory ASA-2010-218 (Avaya)
  
• OpenLDAP 2.4.23 Release Changes (OpenLDAP)
  
• SECURITY: Two OpenLDAP preauth vulnerabilities (OpenLDAP)
  
• VMware ESX 4.0, Patch ESX400-201101402-SG: Updates OpenLDAP and OpenLDAP-clients (VMWare)
  
• VMware ESX 4.0, Patch Release ESX400-201101001 (VMWare)
  
• 2016-04 Security Bulletin: CTP Series: Multiple vulnerabilities in CTP Series (Juniper)
  
• ASA-2010-237 openldap security update (RHSA-2010-0542) (Avaya)
  
• RHSA-2010:0542-1 Moderate: openldap security update (Red Hat)
  
• RHSA-2010:0543-1 Moderate: openldap security update (Red Hat)