Test ID:	1.3.6.1.4.1.25623.1.0.59878
Category:	Fedora Local Security Checks
Title:	Fedora Core 7 FEDORA-2007-3124 (openldap)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to openldap announced via advisory FEDORA-2007-3124. References: [ 1 ] Bug #360081 - CVE-2007-5707 CVE-2007-5708 openldap various flaws [F7] https://bugzilla.redhat.com/show_bug.cgi?id=360081 [ 2 ] Bug #359861 - CVE-2007-5708 openldap slapd pcache overlay DoS via non-null teminated string https://bugzilla.redhat.com/show_bug.cgi?id=359861 [ 3 ] Bug #359851 - CVE-2007-5707 openldap slapd DoS via objectClasses attribute https://bugzilla.redhat.com/show_bug.cgi?id=359851 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update openldap' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-3124 Risk factor : High CVSS Score: 7.1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5707 1018924 http://www.securitytracker.com/id?1018924 26245 http://www.securityfocus.com/bid/26245 27424 http://secunia.com/advisories/27424 27587 http://secunia.com/advisories/27587 27596 http://secunia.com/advisories/27596 27683 http://secunia.com/advisories/27683 27756 http://secunia.com/advisories/27756 27868 http://secunia.com/advisories/27868 29461 http://secunia.com/advisories/29461 29682 http://secunia.com/advisories/29682 ADV-2007-3645 http://www.vupen.com/english/advisories/2007/3645 ADV-2009-3184 http://www.vupen.com/english/advisories/2009/3184 APPLE-SA-2009-11-09-1 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html DSA-1541 http://www.debian.org/security/2008/dsa-1541 FEDORA-2007-741 http://www.redhat.com/archives/fedora-package-announce/2007-November/msg00460.html GLSA-200803-28 http://security.gentoo.org/glsa/glsa-200803-28.xml MDKSA-2007:215 http://www.mandriva.com/security/advisories?name=MDKSA-2007:215 RHSA-2007:1037 http://www.redhat.com/support/errata/RHSA-2007-1037.html RHSA-2007:1038 http://www.redhat.com/support/errata/RHSA-2007-1038.html SUSE-SR:2007:024 http://www.novell.com/linux/security/advisories/2007_24_sr.html USN-551-1 http://www.ubuntu.com/usn/usn-551-1 [openldap-announce] 20071026 OpenLDAP 2.3.39 available http://www.openldap.org/lists/openldap-announce/200710/msg00001.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440632 http://support.apple.com/kb/HT3937 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5119 oval:org.mitre.oval:def:10183 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10183 Common Vulnerability Exposure (CVE) ID: CVE-2007-5708 29225 http://secunia.com/advisories/29225 MDVSA-2008:058 http://www.mandriva.com/security/advisories?name=MDVSA-2008:058 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5163
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.