Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenLDAP服务器Kerberos Bind请求远程栈溢出漏洞
Vulnerability Description
OpenLDAP是美国OpenLDAP基金会的一个轻型目录访问协议（LDAP）的自由和开源实现，它已被包含在Linux发行版中。 OpenLDAP在处理Kerberos Bind请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 OpenLDAP代码的servers/slapd/kerberos.c文件中的krbv4_ldap_auth函数存在缓冲区溢出漏洞，该函数处理指定了LDAP_AUTH_KRBV41认证方式的LDAP bind请求，cred变量包含有指向客户端所发送Kerb
CVSS Information
N/A
Vulnerability Type
N/A