LDAP: OpenLDAP Modrdn RDN UTF-8 String Code Execution

This signature detects attempts to exploit a known code execution vulnerability in OpenLDAP. It is due to a memory corruption when handling a UTF8 string through modrdn. A remote attacker can exploit this by sending a malicious request through modrdn to connect to the target server. A successful attack allows injection and execution of arbitrary code in the context of the affect service. An unsuccessful attack causes termination of slapd daemon resulting in a denial-of-service condition.

Extended Description

OpenLDAP is prone to multiple vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application or cause denial-of-service conditions. OpenLDAP 2.4.22 is vulnerable; other versions may also be affected.

Affected Products

Avaya message_networking

References

BugTraq: 41770

CVE: CVE-2010-0211

Short Name

LDAP:OVERFLOW:MODRDN-UTF8-EXEC

Severity

Major

Recommended

False

Recommended Action

Drop

LDAP: OpenLDAP Modrdn RDN UTF-8 String Code Execution

Extended Description

Affected Products

References

Found a potential security threat?