6.06 LTS: CVE-2007-6698, CVE-2008-0658

[xormar]

From all I've read, CVE-2007-6698, CVE-2008-0658 have not yet been adressed in dapper 6.06 LTS or elsewhere in ubuntu (package's changelog notes nothing).

CVE-2007-6698:
The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.

CVE-2008-0658:
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.

[Emanuele Gentili (emgent)]

CVE-2007-6698 seems already fixed in gutsy.

[Emanuele Gentili (emgent)]

+openldap2.3 (2.3.35-1ubuntu0.2) gutsy-security; urgency=low
+
+ * SECURITY UPDATE:
+ + debian/patches/SECURITY_CVE-2008-0658.patch (LP: #197077)
+ slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39
+ allows remote authenticated users to cause a denial of service (daemon crash)
+ via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related
+ issue to CVE-2007-6698.
+
+ * References
+ - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0658
+ - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5358
+
+ -- Emanuele Gentili <email address hidden> Sun, 02 Mar 2008 15:20:13 +0100

[xormar (public-wernig)]

I didn't find any reference to CVE-2007-6698 in gutsy.
Is this also going into dapper LTS?

[Emanuele Gentili (emgent)]

For gutsy, CVE-2007-6698 was patched. in dapper i will see.
http://www.openldap.org/lists/openldap-bugs/200704/msg00067.html

[Emanuele Gentili (emgent)]

feisty <= are vulnerable to CVE 2007-6698 and CVE 2008-0658, i will release all fix.
Thanks for your help xormar.

[Martin Pitt (pitti)]

Taking for sponsoring, thanks Emanuele!

[Jamie Strandboge (jdstrand)]

http://www.ubuntu.com/usn/usn-584-1

[Jamie Strandboge (jdstrand)]

openldap2.3 (2.4.7-6ubuntu1) hardy; urgency=low

  * Merge from Debian unstable, remaining changes:
    + debian/patches/SECURITY_CVE-2008-0658.patch (LP: #197077)
      slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39
      allows remote authenticated users to cause a denial of service (daemon
      crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION)
      control, a related issue to CVE-2007-6698.
    + debian/apparmor-profile: add AppArmor profile
    + debian/slapd.postinst: Reload AA profile on configuration
    + updated debian/slapd.README.Debian for note on AppArmor
    + debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we
      should now take control
    + debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4
      to make sure that if earlier version of apparmor-profiles gets
      installed it won't overwrite our profile
    + Modify Maintainer value to match the DebianMaintainerField
      specification.

 -- Steve Langasek <email address hidden> Tue, 04 Mar 2008 01:59:51 +0000