Preemptive Protection agains Apple Open Directory Denial of Service Vulnerability
| Check Point Reference: | CPAI-2006-091 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | MU Security | |
| Industry Reference(s): | CVE-2006-1470 US-CERT VU#652196 |
|
| Protection Provided by: |
VPN-1
|
|
| Who is Vulnerable? OSX 10.4.4 through 10.4.6 | ||
| Vulnerability Description The OpenLDAP software allows LDAP-aware programs on a network to get information from a server. Apple uses OpenLDAP as a part of their Open Directory product. An error in the implementation of OpenLDAP may allow a remote attacker with the ability to send a malformed LDAP request to cause Open Directory server to crash. |
||
|
Update/Patch Available Upgrade to OSX 10.4.7 at: http://docs.info.apple.com/article.html?artnum=61798 |
|
|
Vulnerability Details An assertion error exists in the implementation of Open-LDAP. An attacker may send a malformed LDAP message which triggers the assertion and cause a denial-of-service condition. |
Protection Overview
SmartDefense blocks specially crafted LDAP requests that may lead to a denial of service condition (DoS) on the affected LDAP server. This protection was provided on April 27, 2006. For more information, see CPAI-2006-039.
To configure the defense, select your product from the list below and follow the related protection steps.