389 Directory Server Memory Leaks Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID:	46620
Class:	Unknown
CVE:	CVE-2010-4746
Remote:	Yes
Local:	No
Published:	Mar 01 2011 12:00AM
Updated:	Mar 01 2011 12:00AM
Credit:	Adrian Bridgett
Vulnerable:	389 Directory Server 389 Directory Server 1.2.7.4 389 Directory Server 389 Directory Server 1.2.7.3 389 Directory Server 389 Directory Server 1.2.7.2
Not Vulnerable:	389 Directory Server 389 Directory Server 1.2.7.5

389 Directory Server Memory Leaks Multiple Remote Denial Of Service Vulnerabilities

389 Directory Server is prone to multiple remote denial-of-service vulnerabilities because of memory leaks.

Attackers can exploit these issues to consume excessive memory, causing denial-of-service conditions.

Versions prior to 389 Directory Server 1.2.7.5 are vulnerable.

389 Directory Server Memory Leaks Multiple Remote Denial Of Service Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

389 Directory Server Memory Leaks Multiple Remote Denial Of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

389 Directory Server Memory Leaks Multiple Remote Denial Of Service Vulnerabilities

References:

• 389 Directory Server Homepage (389 Directory Server)
  
• 389 Directory Server Release Notes: (389 Directory Server)
  
• massive memory leak in 1.2.7.4 (Adrian Bridgett)