CVE-2011-1067 in 389 Directory Serverinfo

Summary

slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field of the connection table element, which allows remote attackers to cause a denial of service (daemon outage) via Simple Paged Results connections, as demonstrated by using multiple processes to replay TCP sessions, a different vulnerability than CVE-2011-0019.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

02/23/2011

Disclosure

02/23/2011

CPE

ready

CVSS

5.3

EPSS

0.00603

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!