CVE:CVE-2001-0977
CNNVD:CNNVD-200107-100
OpenLDAP 1.2.12之前1.x 版本以及2.0.8之前2.x版本中slapd存在漏洞。远程攻击者借助无效Basic Encoding Rules (BER) 长度字段导致服务拒绝。
solution:Upgrade mandrakesoft mandrake_single_network_firewall to a higher version than 7.2,and avoid the version 7.2; Upgrade openldap openldap to a higher version than 1.0,1.0.1,1.0.2,1.0.3,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,and avoid the version 1.0,1.0.1,1.0.2,1.0.3,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7; Upgrade debian debian_linux to a higher version than 2.2,and avoid the version 2.2; Upgrade mandrakesoft mandrake_linux to a higher version than 7.1,7.2,8.0,and avoid the version 7.1,7.2,8.0; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade redhat linux to a higher version than 6.2,7.0,7.1,and avoid the version 6.2,7.0,7.1