OpenLDAP 'rwm_conn_destroy' Denial of Service Vulnerability
BID:63190
Info
OpenLDAP 'rwm_conn_destroy' Denial of Service Vulnerability
| Bugtraq ID: | 63190 |
| Class: | Unknown |
| CVE: |
CVE-2013-4449 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 11 2013 12:00AM |
| Updated: | Jul 29 2016 05:00PM |
| Credit: | Michael Vishchers of Seven Principles AG |
| Vulnerable: |
Ubuntu Ubuntu Linux 15.04 Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle VM Server for x86 3.2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 OpenLDAP OpenLDAP 2.4.36 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Juniper CTPOS 7.1R Juniper CTPOS 7.0r4 Juniper CTPOS 6.6R5 Juniper CTPOS 6.6R2 Juniper CTPOS 6.6R1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Cisco Unified Communications Manager (UCM) 0 CentOS CentOS 6 CentOS CentOS 5 Avaya one-X Client Enablement Services 6.2 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Application Server 9.0 Avaya Call Management System R17.0 Avaya Aura System Platform 6.2.2 Avaya Aura System Platform 6.2.1 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.3 Avaya Aura System Platform 6.2.1.0.9 Avaya Aura System Platform 6.2 SP1 Avaya Aura System Platform 6.2 Avaya Aura System Platform 6.0.3.9.3 Avaya Aura System Platform 6.0.3.8.3 Avaya Aura System Platform 6.0.3.0.3 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Platform 1.0 Avaya Aura Session Manager 6.3.1 Avaya Aura Messaging 6.1.1 Avaya Aura Messaging 6.2 Avaya Aura Messaging 6.1 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 6.0.2 Avaya Aura Experience Portal 6.0.1 Avaya Aura Experience Portal 7.0 Avaya Aura Experience Portal 6.0 SP2 Avaya Aura Experience Portal 6.0 SP1 Avaya Aura Experience Portal 6.0 Avaya Aura Collaboration Environment 2.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.1.2 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 6.0 Avaya Aura Application Enablement Services 5.2.4 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 Avaya Aura Application Enablement Services 5.0 |
| Not Vulnerable: |
Juniper CTPOS 7.1r2 Juniper CTPOS 7.1r1 |
Discussion
OpenLDAP 'rwm_conn_destroy' Denial of Service Vulnerability
OpenLDAP is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application denying service to legitimate users.
OpenLDAP is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected application denying service to legitimate users.
Exploit / POC
OpenLDAP 'rwm_conn_destroy' Denial of Service Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
References
OpenLDAP 'rwm_conn_destroy' Denial of Service Vulnerability
References:
References:
- Cisco Unified Communications Manager Denial of Service Vulnerability (Cisco)
- OpenLDAP Homepage (OpenLDAP)
- 2016-04 Security Bulletin: CTP Series: Multiple vulnerabilities in CTP Series (Juniper)
- openldap security and bug fix update (RHSA-2014-0126) (Avaya)
- openldap security update (RHSA-2014-0206) (Avaya)
- Oracle VM Server for x86 Bulletin - July 2016 (Oracle)