nss-pam-ldapd-0.7.5-18.1.AXS4

The nss-pam-ldapd daemon, nslcd, uses a directory server to look up name service information (users, groups, etc.) on behalf of a lightweight nsswitch module.

Security issues fixed with this release:

• CVE-2013-0288
nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.

Fixed bugs:

• Fixed a misprint in the disconnect logic and added a missing return value.

• The idle time expiration test is now performed during the LDAP search operation to prevent that the connection time out on LDAP servers under heavy load.

• When accessing a large group, the nslcd daemon read a buffer provided by the glibc library. If the buffer was too small to contain the group, glibc would increase its size until the operation was successful. This returned many redundant error messages to the /var/log/message file. It has been fixed and redundant messages are not returned.