Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2018-1089
Description:389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
Test IDs: 1.3.6.1.4.1.25623.1.1.10.2018.0245   1.3.6.1.4.1.25623.1.0.891428   1.3.6.1.4.1.25623.1.0.882876   1.3.6.1.4.1.25623.1.0.882899   1.3.6.1.4.1.25623.1.1.2.2018.1191  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-1089
BugTraq ID: 104137
http://www.securityfocus.com/bid/104137
https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html
RedHat Security Advisories: RHSA-2018:1364
https://access.redhat.com/errata/RHSA-2018:1364
RedHat Security Advisories: RHSA-2018:1380
https://access.redhat.com/errata/RHSA-2018:1380




© 1998-2025 E-Soft Inc. All rights reserved.