Dave Carrigan Auth_LDAP远程格式化字符串漏洞

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Dave Carrigan auth_ldap 1.2 .X

Dave Carrigan auth_ldap-1.6.1.tar.gz

http://www.rudedog.org/auth_ldap/auth_ldap-1.6.1.tar.gz

Dave Carrigan auth_ldap 1.3 .X

Dave Carrigan auth_ldap-1.6.1.tar.gz

http://www.rudedog.org/auth_ldap/auth_ldap-1.6.1.tar.gz

Dave Carrigan auth_ldap 1.4 .X

Dave Carrigan auth_ldap-1.6.1.tar.gz

http://www.rudedog.org/auth_ldap/auth_ldap-1.6.1.tar.gz

Dave Carrigan auth_ldap 1.6 .0

Dave Carrigan auth_ldap-1.6.1.tar.gz

http://www.rudedog.org/auth_ldap/auth_ldap-1.6.1.tar.gz

Fedora Legacy auth_ldap-1.6.0-4.2.legacy.i386.rpmRed Hat Linux 7.3:

http://download.fedoralegacy.org/redhat/7.3/updates/i386/auth_ldap-1.6.0-4.2.legacy.i386.rpm

来源: MANDRIVA

名称: MDKSA-2006:017

链接:http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:017

来源: BID

名称: 16177

链接:http://www.securityfocus.com/bid/16177

来源: REDHAT

名称: RHSA-2006:0179

链接:http://www.redhat.com/support/errata/RHSA-2006-0179.html

来源: VUPEN

名称: ADV-2006-0117

链接:http://www.frsirt.com/english/advisories/2006/0117

来源: DEBIAN

名称: DSA-952

链接:http://www.debian.org/security/2006/dsa-952

来源: SECUNIA

名称: 18568

链接:http://secunia.com/advisories/18568

来源: SECUNIA

名称: 18412

链接:http://secunia.com/advisories/18412

来源: SECUNIA

名称: 18405

链接:http://secunia.com/advisories/18405

来源: SECUNIA

名称: 18382

链接:http://secunia.com/advisories/18382

来源: BUGTRAQ

名称: 20060109 Digital Armaments Security Advisory 01.09.2006: Apache auth_ldap module Multiple Format Strings Vulnerability

链接:http://www.securityfocus.com/archive/1/archive/1/421286/100/0/threaded

来源: www.rudedog.org

链接:http://www.rudedog.org/auth_ldap/Changes.html

来源: MISC

链接:http://www.digitalarmaments.com/2006090173928420.html

来源: SECTRACK

名称: 1015456

链接:http://securitytracker.com/id?1015456

来源: XF

名称: apache-authldap-format-string(24030)

链接:http://xforce.iss.net/xforce/xfdb/24030