NetSight
IP …
critical9.8Public exploit code

CVE-2010-0211

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attac…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.

Affected products

VendorProductAffected versions
OpenldapOpenldap
Version 2.4.22
VmwareEsxi
Versions 4.0, 4.1
OpensuseOpensuse
Version 11.0
AppleMac Os X
from 10.6.0 before 10.6.5
AppleMac Os X Server
from 10.6.0 before 10.6.5

Weakness classification

CWE-252

References