CVE-2005-2377

NONE EPSS 82.8%

Published Jul 26, 200520y ago · Modified Jun 16, 20262w ago

Published Jul 26, 2005 20y ago

Last Modified Jun 16, 2026 2w ago

Description

nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service (crond and other application crash) if they can cause an LDAP server to become unavailable. NOTE: it is not clear whether this attack scenario is sufficient to include this item in CVE.

Threat Intelligence

EPSS Exploit Probability

82.8% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Affected Products 2

Vendor	Product	Version	Range
mandrakesoft	mandrake_linux	10.0	any
mandrakesoft	mandrake_linux_corporate_server	*	any

References 3

qa.mandriva.com http://qa.mandriva.com/show_bug.cgi?id=13271
mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2005:121

Patch
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/40501

Remediation

mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2005:121

Patch