PatchTheCVEnss ldap vulnerabilities and fixes
Recent CVEs affecting nss ldap, with upgrade or downgrade steps. 5 tracked.
Also searched as: nssldap.
nss ldap has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-11-13. Highest priority: CVE-2002-0735 (score 48/100).
- CVE-2007-5794 MEDIUM 4.3 MITIGATE Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork aft
- CVE-2005-2069 MEDIUM 5.0 MITIGATE MITIGATE pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the s
- CVE-2002-0825 HIGH 7.5 UPGRADE Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial
- CVE-2002-0735 HIGH 7.5 DOWNGRADE DOWNGRADE Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_L
- CVE-2000-1045 LOW 1.2 DOWNGRADE nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause
FAQ
How do I fix nss ldap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nss ldap being exploited right now?
None of the tracked nss ldap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nss ldap CVE should I patch first?
CVE-2002-0735 currently ranks highest (48/100): Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_L.