Buffer overflow in the regular expression handler in Red Hat...

Vulnerability Description

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.

References

• http://www.securityfocus.com/bid/29126
• http://www.securitytracker.com/id?1020001
• http://www.redhat.com/support/errata/RHSA-2008-0268.html
• https://bugzilla.redhat.com/show_bug.cgi?id=444712
• http://secunia.com/advisories/30185
• http://secunia.com/advisories/30181
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42332
• http://www.redhat.com/support/errata/RHSA-2008-0269.html