OpenLDAP.Modrdn.RDN.String.Memory.Corruption

Release Date Oct 26, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a memory-corruption vulnerability in OpenLDAP. The vulnerability is caused by an error when the vulnerable software handles a specially crafted string via modrdn. It allows a remote attacker to execute arbitrary code.
Affected Products OpenLDAP 2.4.22 and prior versions
Recommended Actions Upgrade to OpenLDAP version 2.4.23: http://www.openldap.org/software/download/
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-0212 CVE-2010-0211
Reference/s http://www.securityfocus.com/bid/41770 (BugTraq)

Fortinet