CVE-2006-2754 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-2754
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2754

Description: Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.

CVE Status: Candidate

References: UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-305-1 SAID Secunia Advisory: SA20495 Secunia Advisory: SA20685 Secunia Advisory: SA20126 Secunia Advisory: SA20848 OSVDB 25659 OPENPKG http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.008-openldap.html MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:096 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200606-17.xml CONFIRM http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22 http://www.openldap.org/software/release/changes.html http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c.diff?r1=1.21&r2=1.22&hideattic=1&sortbydate=0&f=h BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/436674/100/0/threaded

Return to the previous page.