enterprise-support team mailing list archive

Thread
Date

[Bug 884163] Re: OpenLDAP "UTF8StringNormalize()" Off-by-One Denial of Service Vulnerability

To: enterprise-support@xxxxxxxxxxxxxxxxxxx
From: Jamie Strandboge <jamie@xxxxxxxxxx>
Date: Mon, 14 Nov 2011 20:02:29 -0000
Reply-to: Bug 884163 <884163@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Hardy's openldap2.3 does not have postalAddressValidate(), which is the
only known function to pass UTF8StringNormalize() a 0 length string.

** Changed in: openldap (Ubuntu Hardy)
       Status: In Progress => Invalid

** Changed in: openldap (Ubuntu Hardy)
     Assignee: Jamie Strandboge (jdstrand) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to openldap in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/884163

Title:
  OpenLDAP "UTF8StringNormalize()" Off-by-One Denial of Service
  Vulnerability

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/884163/+subscriptions