~ubuntu-security/ubuntu-cve-tracker/master

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
PublicDate: 2005-07-26
Candidate: CVE-2005-2377
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2377
Description:
 nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server
 and Mandrake 10.0, and other operating systems, does not properly handle a
 SIGPIPE signal when sending a search request to an LDAP directory server,
 which might allow remote attackers to cause a denial of service (crond and
 other application crash) if they can cause an LDAP server to become
 unavailable.  NOTE: it is not clear whether this attack scenario is
 sufficient to include this item in CVE.
Ubuntu-Description:
Notes:
Bugs:
dapper_libnss-ldap: not-affected
edgy_libnss-ldap: not-affected
feisty_libnss-ldap: not-affected
devel_libnss-ldap: not-affected
upstream_libnss-ldap: