Test ID:	1.3.6.1.4.1.25623.1.0.881227
Category:	CentOS Local Security Checks
Title:	CentOS Update for openldap CESA-2012:0899 centos6
Summary:	The remote host is missing an update for the 'openldap'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'openldap' package(s) announced via the referenced advisory. Vulnerability Insight: OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. A denial of service flaw was found in the way the OpenLDAP server daemon (slapd) processed certain search queries requesting only attributes and no values. In certain configurations, a remote attacker could issue a specially-crafted LDAP search query that, when processed by slapd, would cause slapd to crash due to an assertion failure. (CVE-2012-1164) These updated openldap packages include numerous bug fixes. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.3 Technical Notes for information on the most significant of these changes. Users of OpenLDAP are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the OpenLDAP daemons will be restarted automatically. Affected Software/OS: openldap on CentOS 6 Solution: Please install the updated packages. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1164 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra https://seclists.org/bugtraq/2019/Dec/23 20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra http://seclists.org/fulldisclosure/2019/Dec/26 48372 http://secunia.com/advisories/48372 49607 http://secunia.com/advisories/49607 52404 http://www.securityfocus.com/bid/52404 GLSA-201406-36 http://security.gentoo.org/glsa/glsa-201406-36.xml MDVSA-2012:130 http://www.mandriva.com/security/advisories?name=MDVSA-2012:130 RHSA-2012:0899 http://rhn.redhat.com/errata/RHSA-2012-0899.html http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7143 http://www.openldap.org/software/release/changes.html https://support.apple.com/kb/HT210788
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.