OpenPKG Security Advisory OpenPKG-SA-2006.033 – Evgeny Legerov discovered a vendor-confirmed denial of service vulnerability in OpenLDAP. The vulnerability allows remote attackers to cause a DoS via a certain combination of LDAP “Bind” requests that trigger an assertion failure in “libldap”. The flaw is caused by incorrectly computing the length of a normalized name.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51982/OpenPKG-SA-2006.033.txt
Source: https://packetstormsecurity.com/files/51982/OpenPKG-Security-Advisory-2006.33.html