Bug 158915

Summary:	<net-nds/openldap-2.3.31 buffer overflow
Product:	Gentoo Security	Reporter:	Markus Ullmann (RETIRED) <jokey>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Markus Ullmann (RETIRED) gentoo-dev

2006-12-23 07:10:03 UTC

From upstream ChangeLog

Fixed slapd kbind buffer overflow condition (ITS#4775)

Though I can't view the ticket in upstreams tracker and got no response on irc, so can't say something about severity. But as bind is like authentication, it might be something serious

Comment 1 Markus Ullmann (RETIRED) gentoo-dev

2006-12-23 08:22:38 UTC

well I got further note from an upstream maintainer now. This is just code provided in the tarball, it isn't compiled in our env, so INVALIDating it