CVE ID:	CVE-2012-2134
Description:	The handle_connection_error function in ldap_helper.c in bind-dyndb- ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.
Test IDs:	1.3.6.1.4.1.25623.1.0.864364   1.3.6.1.4.1.25623.1.0.864236   1.3.6.1.4.1.25623.1.0.72264   1.3.6.1.4.1.25623.1.0.123919   1.3.6.1.4.1.25623.1.0.864235   1.3.6.1.4.1.25623.1.0.870691   1.3.6.1.4.1.25623.1.0.71325   1.3.6.1.4.1.25623.1.0.881069
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2134 48901 http://secunia.com/advisories/48901 81619 http://www.osvdb.org/81619 RHSA-2012:0683 http://rhn.redhat.com/errata/RHSA-2012-0683.html [Freeipa-users] 20120424 named-dyndb-ldap looses connection when the LDAP server is under high load https://www.redhat.com/archives/freeipa-users/2012-April/msg00144.html [oss-security] 20140424 Re: CVE Request -- bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query for zone served by bind-dyndb-ldap http://www.openwall.com/lists/oss-security/2012/04/24/15 https://bugzilla.redhat.com/show_bug.cgi?id=815846 https://bugzilla.redhat.com/show_bug.cgi?id=815846 https://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/tree/NEWS https://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/tree/NEWS