CVE-2008-2952 Detail

CVE-2008-2952

EPSS

82.62%V3

Vector

Network

Published

2008-07-01
19h00 +00:00

Modified

2018-10-11
17h57 +00:00

Official links

CVE.org

NVD

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Notifications manage

List of Notifications

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Criteria applied when sending the alert: compared with the last alert sent + differences in CISA, EPSS, CVSS, CWE, Solutions, CPE.

Parameters

You can specify a title that will be retrieved in the alerts that will be sent out.

Specified here a CVE ID as CVE-2025-1234

Planning

Month

Next run calculation

Day

Weekday

Hour

Minute

Creation date

Last execution

Next execution

Functionality requiring a connection

This feature, which allows you to receive alerts, is only active when you are logged into your account.

CVE Descriptions

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	5		AV:N/AC:L/Au:N/C:N/I:N/A:P	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Exploit information

Exploit Database EDB-ID : 32000

Publication date : 2008-06-29 22h00 +00:00
Author : Cameron Hotchkies
EDB Verified : Yes

source: https://www.securityfocus.com/bid/30013/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users by crashing affected servers. OpenLDAP 2.3.41 is vulnerable to this issue; earlier versions back to approximately 2.1.18 as well as newer versions may also be affected. slapd -h ldap:// -d511 & perl -e 'print "\xff\xff\xff\x00\x84\x41\x42\x43\x44"' | nc localhost 389

Products Mentioned

Configuraton 0

Openldap>>Openldap >> Version 2.2.4

Openldap>>Openldap >> Version 2.2.5

Openldap>>Openldap >> Version 2.2.6

Openldap>>Openldap >> Version 2.2.7

Openldap>>Openldap >> Version 2.2.8

Openldap>>Openldap >> Version 2.2.9

Openldap>>Openldap >> Version 2.3.4

Openldap>>Openldap >> Version 2.3.5

Openldap>>Openldap >> Version 2.3.6

Openldap>>Openldap >> Version 2.3.7

Openldap>>Openldap >> Version 2.3.8

Openldap>>Openldap >> Version 2.3.9

Openldap>>Openldap >> Version 2.3.10

Openldap>>Openldap >> Version 2.3.11

Openldap>>Openldap >> Version 2.3.12

Openldap>>Openldap >> Version 2.3.13

Openldap>>Openldap >> Version 2.3.14

Openldap>>Openldap >> Version 2.3.15

Openldap>>Openldap >> Version 2.3.16

Openldap>>Openldap >> Version 2.3.17

Openldap>>Openldap >> Version 2.3.18

Openldap>>Openldap >> Version 2.3.19

Openldap>>Openldap >> Version 2.3.20

Openldap>>Openldap >> Version 2.3.21

Openldap>>Openldap >> Version 2.3.22

Openldap>>Openldap >> Version 2.3.23

Openldap>>Openldap >> Version 2.3.24

Openldap>>Openldap >> Version 2.3.25

Openldap>>Openldap >> Version 2.3.26

Openldap>>Openldap >> Version 2.3.27

Openldap>>Openldap >> Version 2.3.28

Openldap>>Openldap >> Version 2.3.29

Openldap>>Openldap >> Version 2.3.29 (Open CPE detail)

Openldap>>Openldap >> Version 2.3.30

Openldap>>Openldap >> Version 2.3.31

Openldap>>Openldap >> Version 2.3.32

Openldap>>Openldap >> Version 2.3.33

Openldap>>Openldap >> Version 2.3.34

Openldap>>Openldap >> Version 2.3.35

Openldap>>Openldap >> Version 2.3.36

Openldap>>Openldap >> Version 2.3.37

Openldap>>Openldap >> Version 2.3.38

Openldap>>Openldap >> Version 2.3.39

Openldap>>Openldap >> Version 2.3.40

Openldap>>Openldap >> Version 2.3.41

Openldap>>Openldap >> Version 2.3.42

Openldap>>Openldap >> Version 2.3.43

Openldap>>Openldap >> Version 2.4.10

Openldap>>Openldap >> Version 2.4.10 (Open CPE detail)

References

http://www.redhat.com/support/errata/RHSA-2008-0583.html
Tags : vendor-advisory, x_refsource_REDHAT

http://security.gentoo.org/glsa/glsa-200808-09.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/31364
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10662
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/30917
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
Tags : vendor-advisory, x_refsource_APPLE

https://exchange.xforce.ibmcloud.com/vulnerabilities/43515
Tags : vdb-entry, x_refsource_XF

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580%3Bselectid=5580
Tags : x_refsource_CONFIRM

http://www.debian.org/security/2008/dsa-1650
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.securityfocus.com/bid/30013
Tags : vdb-entry, x_refsource_BID

http://www.openwall.com/lists/oss-security/2008/07/01/2
Tags : mailing-list, x_refsource_MLIST

http://www.vupen.com/english/advisories/2008/2268
Tags : vdb-entry, x_refsource_VUPEN

http://www.securityfocus.com/archive/1/495320/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://issues.rpath.com/browse/RPL-2645
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/30996
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/31436
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.mandriva.com/security/advisories?name=MDVSA-2008:144
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.openwall.com/lists/oss-security/2008/07/13/2
Tags : mailing-list, x_refsource_MLIST

http://www.ubuntu.com/usn/usn-634-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.zerodayinitiative.com/advisories/ZDI-08-052/
Tags : x_refsource_MISC

http://secunia.com/advisories/30853
Tags : third-party-advisory, x_refsource_SECUNIA

http://wiki.rpath.com/Advisories:rPSA-2008-0249
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/31326
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00129.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/32254
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1020405
Tags : vdb-entry, x_refsource_SECTRACK

http://www.vupen.com/english/advisories/2008/1978/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580
Tags : x_refsource_CONFIRM

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00109.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/32316
Tags : third-party-advisory, x_refsource_SECUNIA

CVE-2008-2952 : Detail

CVE-2008-2952

CVE Descriptions

CVE Informations

Related Weaknesses

Metrics

EPSS

EPSS Score

EPSS Percentile

Exploit information

Exploit Database EDB-ID : 32000

Products Mentioned

Configuraton 0

References