Just read http://lwn.net/Alerts/17457/ Excerpt: To: <suse-security-announce@suse.com> Subject: [suse-security-announce] SuSE Security Announcement: OpenLDAP2 (SuSE-SA:2002:047) Date: Fri, 6 Dec 2002 12:16:32 +0100 (MET) 1) security vulnerability resolved: Buffer overflows in openldap2. The SuSE Security Team reviewed critical parts of that package and found several buffer overflows and other bugs remote attackers could exploit to gain access on systems running vulnerable LDAP servers. In addition to these bugs, various local exploitable bugs within the OpenLDAP2 libraries (openldap2-devel package) have been fixed. Obviously they update their openldap 2.0.23. Debian also has a 2.0.23 version. Might Debian be vulnerable? Bernhard ps.: Please send me a copy, I'm not on the list.
Attachment:
pgpT_n8dyNeo5.pgp
Description: PGP signature