csaf_redhat - rhsa-2013

rhsa-2013_0590

Vulnerability from csaf_redhat

Published

2013-03-04 21:00

Modified

2024-11-22 06:18

Summary

Red Hat Security Advisory: nss-pam-ldapd security update

Notes

Topic

Updated nss-pam-ldapd packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Details

The nss-pam-ldapd packages provide the nss-pam-ldapd daemon (nslcd), which uses a directory server to lookup name service information on behalf of a lightweight nsswitch module. An array index error, leading to a stack-based buffer overflow flaw, was found in the way nss-pam-ldapd managed open file descriptors. An attacker able to make a process have a large number of open file descriptors and perform name lookups could use this flaw to cause the process to crash or, potentially, execute arbitrary code with the privileges of the user running the process. (CVE-2013-0288) Red Hat would like to thank Garth Mollett for reporting this issue. All users of nss-pam-ldapd are advised to upgrade to these updated packages, which contain a backported patch to fix this issue.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated nss-pam-ldapd packages that fix one security issue are now\navailable for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from the\nCVE link in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The nss-pam-ldapd packages provide the nss-pam-ldapd daemon (nslcd), which\nuses a directory server to lookup name service information on behalf of a\nlightweight nsswitch module.\n\nAn array index error, leading to a stack-based buffer overflow flaw, was\nfound in the way nss-pam-ldapd managed open file descriptors. An attacker\nable to make a process have a large number of open file descriptors and\nperform name lookups could use this flaw to cause the process to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nthe process. (CVE-2013-0288)\n\nRed Hat would like to thank Garth Mollett for reporting this issue.\n\nAll users of nss-pam-ldapd are advised to upgrade to these updated\npackages, which contain a backported patch to fix this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0590",
        "url": "https://access.redhat.com/errata/RHSA-2013:0590"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "909119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909119"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0590.json"
      }
    ],
    "title": "Red Hat Security Advisory: nss-pam-ldapd security update",
    "tracking": {
      "current_release_date": "2024-11-22T06:18:04+00:00",
      "generator": {
        "date": "2024-11-22T06:18:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2013:0590",
      "initial_release_date": "2013-03-04T21:00:00+00:00",
      "revision_history": [
        {
          "date": "2013-03-04T21:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-03-04T21:10:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T06:18:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                  "product_id": "6ComputeNode-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.4.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
                "product": {
                  "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
                  "product_id": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd-debuginfo@0.7.5-18.1.el6_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
                "product": {
                  "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
                  "product_id": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd@0.7.5-18.1.el6_4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
                "product": {
                  "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
                  "product_id": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd-debuginfo@0.7.5-18.1.el6_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
                "product": {
                  "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
                  "product_id": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd@0.7.5-18.1.el6_4?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
                "product": {
                  "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
                  "product_id": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd@0.7.5-18.1.el6_4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
                "product": {
                  "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
                  "product_id": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd-debuginfo@0.7.5-18.1.el6_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
                "product": {
                  "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
                  "product_id": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd@0.7.5-18.1.el6_4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
                "product": {
                  "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
                  "product_id": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd-debuginfo@0.7.5-18.1.el6_4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
                "product": {
                  "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
                  "product_id": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd@0.7.5-18.1.el6_4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
                "product": {
                  "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
                  "product_id": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd-debuginfo@0.7.5-18.1.el6_4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
                "product": {
                  "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
                  "product_id": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd@0.7.5-18.1.el6_4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
                "product": {
                  "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
                  "product_id": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd-debuginfo@0.7.5-18.1.el6_4?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
                "product": {
                  "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
                  "product_id": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-pam-ldapd@0.7.5-18.1.el6_4?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6Client-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6Server-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
        "relates_to_product_reference": "6Workstation-6.4.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64"
        },
        "product_reference": "nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
        "relates_to_product_reference": "6Workstation-6.4.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Garth Mollett"
          ]
        }
      ],
      "cve": "CVE-2013-0288",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2013-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "909119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
          "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
          "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
          "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
          "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
          "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
          "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
          "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
          "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
          "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
          "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
          "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
          "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
          "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
          "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
          "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
          "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
          "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
          "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
          "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
          "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
          "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
          "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
          "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
          "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
          "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
          "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
          "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
          "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
          "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
          "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
          "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
          "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
          "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
          "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
          "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
          "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
          "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
          "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
          "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
          "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
          "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
          "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
          "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
          "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
          "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
          "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
          "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
          "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
          "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
          "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
          "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0288"
        },
        {
          "category": "external",
          "summary": "RHBZ#909119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0288",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0288"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0288",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0288"
        }
      ],
      "release_date": "2013-02-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-03-04T21:00:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0590"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6Client-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6Client-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6ComputeNode-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6ComputeNode-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6Server-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6Server-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.i686",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.ppc64",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.s390x",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.src",
            "6Workstation-6.4.z:nss-pam-ldapd-0:0.7.5-18.1.el6_4.x86_64",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.i686",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.ppc64",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.s390x",
            "6Workstation-6.4.z:nss-pam-ldapd-debuginfo-0:0.7.5-18.1.el6_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow"
    }
  ]
}

cve-2013-0288

Vulnerability from cvelistv5

Published

2013-03-04 21:00

Modified

2024-08-06 14:18

Severity ?

Summary

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0288	x_refsource_MISC
	http://rhn.redhat.com/errata/RHSA-2013-0590.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/58007	vdb-entry, x_refsource_BID
	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690319	x_refsource_MISC
	http://www.debian.org/security/2012/dsa-2628	vendor-advisory, x_refsource_DEBIAN
	http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2013/02/18/2	mailing-list, x_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099438.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/52212	third-party-advisory, x_refsource_SECUNIA
	http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=f266f05f20afe73e89c3946a7bd60bd7c5948e1b	x_refsource_CONFIRM
	http://secunia.com/advisories/52242	third-party-advisory, x_refsource_SECUNIA
	http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=abf03bc54032beeff95b1b8634cc005137e11f32	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:106	vendor-advisory, x_refsource_MANDRIVA
	http://lists.arthurdejong.org/nss-pam-ldapd-announce/2013/msg00001.html	mailing-list, x_refsource_MLIST
	https://exchange.xforce.ibmcloud.com/vulnerabilities/82175	vdb-entry, x_refsource_XF
	https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-03/msg00087.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2013-03/msg00091.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T14:18:09.878Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0288"
          },
          {
            "name": "RHSA-2013:0590",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0590.html"
          },
          {
            "name": "58007",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/58007"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690319"
          },
          {
            "name": "DSA-2628",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2628"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81"
          },
          {
            "name": "[oss-security] 20130218 CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/02/18/2"
          },
          {
            "name": "FEDORA-2013-2754",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099438.html"
          },
          {
            "name": "52212",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/52212"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=f266f05f20afe73e89c3946a7bd60bd7c5948e1b"
          },
          {
            "name": "52242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/52242"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=abf03bc54032beeff95b1b8634cc005137e11f32"
          },
          {
            "name": "MDVSA-2013:106",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:106"
          },
          {
            "name": "[nss-pam-ldapd-announce] 20130218 nss-pam-ldapd security advisory (CVE-2013-0288)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.arthurdejong.org/nss-pam-ldapd-announce/2013/msg00001.html"
          },
          {
            "name": "nsspamldapd-fdsetsize-bo(82175)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82175"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071"
          },
          {
            "name": "openSUSE-SU-2013:0522",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00087.html"
          },
          {
            "name": "openSUSE-SU-2013:0524",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00091.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-02-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0288"
        },
        {
          "name": "RHSA-2013:0590",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0590.html"
        },
        {
          "name": "58007",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/58007"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690319"
        },
        {
          "name": "DSA-2628",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2628"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81"
        },
        {
          "name": "[oss-security] 20130218 CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/02/18/2"
        },
        {
          "name": "FEDORA-2013-2754",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099438.html"
        },
        {
          "name": "52212",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/52212"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=f266f05f20afe73e89c3946a7bd60bd7c5948e1b"
        },
        {
          "name": "52242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/52242"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=abf03bc54032beeff95b1b8634cc005137e11f32"
        },
        {
          "name": "MDVSA-2013:106",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:106"
        },
        {
          "name": "[nss-pam-ldapd-announce] 20130218 nss-pam-ldapd security advisory (CVE-2013-0288)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.arthurdejong.org/nss-pam-ldapd-announce/2013/msg00001.html"
        },
        {
          "name": "nsspamldapd-fdsetsize-bo(82175)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82175"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071"
        },
        {
          "name": "openSUSE-SU-2013:0522",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00087.html"
        },
        {
          "name": "openSUSE-SU-2013:0524",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00091.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-0288",
    "datePublished": "2013-03-04T21:00:00",
    "dateReserved": "2012-12-06T00:00:00",
    "dateUpdated": "2024-08-06T14:18:09.878Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted