bind-dyndb-ldap-1.1.0-0.9.b1.1.0.1.AXS4

エラータID: AXSA:2012-834:04

Release date: 
Tuesday, August 28, 2012 - 12:37
Subject: 
bind-dyndb-ldap-1.1.0-0.9.b1.1.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server.

Security issues fixed with this release;

CVE-2012-3429
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.

Solution: 

Update packages.

CVEs: 
CVE-2012-3429
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.


Additional Info: 

N/A

Download: 

SRPMS
  1. bind-dyndb-ldap-1.1.0-0.9.b1.1.0.1.AXS4.src.rpm
    MD5: fe15d1df8d14f01c8b1dcd30faca8770
    SHA-256: 88faabc430638de8792c9742cde7d6a0104fe1094d347ebb2a42e460c051c4d1
    Size: 307.88 kB

Asianux Server 4 for x86
  1. bind-dyndb-ldap-1.1.0-0.9.b1.1.0.1.AXS4.i686.rpm
    MD5: af639671f5c98d6df0d5060d44b92632
    SHA-256: c357bd5cf61c338ccc9678d137b84800c94dbeb2206c8927f7ba46e3428279bc
    Size: 62.23 kB

Asianux Server 4 for x86_64
  1. bind-dyndb-ldap-1.1.0-0.9.b1.1.0.1.AXS4.x86_64.rpm
    MD5: 4c264abc2c1f7fb3213686eb334c768b
    SHA-256: 0c4cdea4f2f10f702520feb9f22c3529b5a91ecba94a95bfb317f4296c4514cf
    Size: 62.42 kB