CVE:CVE-2013-0288
CNNVD:CNNVD-201302-409
nss-pam-ldapd是用于在unix系统上对LDAP服务器进行身份和身份验证管理的工具。
nss-pam-ldapd 0.7.18和之前版本以及0.8.11版本存在缓冲区错误漏洞，该漏洞源于应用程序复制到不充分大小缓冲区之前没有对用户提供的数据进行正确边界值校验。攻击者利用该漏洞在受影响应用程序上下文中执行任意代码。失败的攻击尝试将导致拒绝服务状态。
solution:Upgrade arthurdejong nss-pam-ldapd to a higher version than 0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.7.17,0.1,0.2,0.2.1,0.3,0.4,0.4.1,0.5,0.6,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.7.1,0.6.7.2,0.6.8,0.6.9,0.6.10,0.6.11,0.6.12,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.7.13,0.7.14,0.7.15,0.7.16,and avoid the version 0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,(,0.7.17],0.1,0.2,0.2.1,0.3,0.4,0.4.1,0.5,0.6,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.7.1,0.6.7.2,0.6.8,0.6.9,0.6.10,0.6.11,0.6.12,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.7.12,0.7.13,0.7.14,0.7.15,0.7.16