Red Hat Security Advisory 2012-0683-01

newsbot

newsbot

RSS Feed
Red Hat Security Advisory 2012-0683-01 - The dynamic LDAP back end is a plug-in for BIND that provides back-end capabilities to LDAP databases. It features support for dynamic updates and internal caching that help to reduce the load on LDAP servers. A flaw was found in the way bind-dyndb-ldap handled LDAP query errors. If a remote attacker were able to send DNS queries to a named server that is configured to use bind-dyndb-ldap, they could trigger such an error with a DNS query leveraging bind-dyndb-ldap's insufficient escaping of the LDAP base DN. This would result in an invalid LDAP query that named would retry in a loop, preventing it from responding to other DNS queries. With this update, bind-dyndb-ldap only attempts to retry one time when an LDAP search returns an unexpected error.

Weiterlesen...
 

Ähnliche Themen

Red Hat Security Advisory 2012-1139-01

Red Hat Security Advisory 2012-1549-01

Red Hat Security Advisory 2012-1365-01

Red Hat Security Advisory 2013-0132-01

Secunia Security Advisory 50159

Zurück
Oben