Launchpad.net

CVE 2007-6698

The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.

Related bugs and status

CVE-2007-6698 (Candidate) is related to these bugs:

Bug #191563: [hardy] slapd CLEARTEXT password migration issue

Summary				In	Importance	Status
	191563	[hardy] slapd CLEARTEXT password migration issue		openldap2.3 (Ubuntu)	Medium	Fix Released

Bug #197077: 6.06 LTS: CVE-2007-6698, CVE-2008-0658

		In	Importance	Status
197077	6.06 LTS: CVE-2007-6698, CVE-2008-0658	openldap2.2 (Ubuntu)	Medium	Fix Released
197077	6.06 LTS: CVE-2007-6698, CVE-2008-0658	openldap2.2 (Ubuntu Gutsy)	Medium	Fix Released
197077	6.06 LTS: CVE-2007-6698, CVE-2008-0658	openldap2.2 (Ubuntu Feisty)	Medium	Fix Released
197077	6.06 LTS: CVE-2007-6698, CVE-2008-0658	openldap2.2 (Ubuntu Edgy)	Undecided	Fix Released
197077	6.06 LTS: CVE-2007-6698, CVE-2008-0658	openldap2.2 (Ubuntu Dapper)	Undecided	Fix Released
197077	6.06 LTS: CVE-2007-6698, CVE-2008-0658	openldap2.2 (Ubuntu Hardy)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

References

MLIST: [openldap-bugs] 200704...
MLIST: [openldap-bugs] 200704...
CONFIRM: https://bugzilla.redha...
FEDORA: FEDORA-2008-1307
SECUNIA: 28817
CONFIRM: http://wiki.rpath.com/...
BID: 26245
SECUNIA: 28953
REDHAT: RHSA-2008:0110
SECTRACK: 1019480
SECUNIA: 29068
MANDRIVA: MDVSA-2008:058
UBUNTU: USN-584-1
SECUNIA: 29225
SECUNIA: 29256
DEBIAN: DSA-1541
SECUNIA: 29682
SUSE: SUSE-SR:2008:010
SECUNIA: 29957
CONFIRM: http://wiki.rpath.com/...
CONFIRM: http://support.apple.c...
APPLE: APPLE-SA-2009-11-09-1
VUPEN: ADV-2009-3184
OVAL: oval:org.mitre.oval:de...
BUGTRAQ: 20080212 rPSA-2008-005...