You are here: silicon.com > Software > Security Strategy

Security Strategy

LDAP blues: Server weakness throws up security fears

Denial-of-service threat revealed...

By Sally Watson

Published: 17 July 2001 12:02 GMT

Researchers have uncovered a vulnerability in LDAP (lightweight directory access protocol) which has left thousands of web servers open to email bombardment by malicious attackers.

According to the CERT security team at Carnegie Mellon University, the flaw leaves servers open to denial-of-service (DoS) attacks and enables unauthorised access from outside the network.

The University of California estimates some 5,000 DoS attacks take place every week.

LDAP is a simple and widely used protocol enabling companies to access and search directories of names, phone numbers, addresses stored on a variety of incompatible systems.

Users running versions of IBM SecureWay, iPlanet Directory Server, Lotus Domino R5 Server, Network Associates' PGP Keyserver, Microsoft Exchange 5.5 LDAP Service, OpenLDAP, Oracle 8i Enterprise Edition, Qualcomm Eudora mail program and Teamware Office are at risk.

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

Nick Heath Your top HR tech priorities for next year revealed How to make human resources IT work for you

Bob Tarzey Why you must rein in your power users When they do damage, it can be catastrophic to your business


  • Jobs
Protocol Stack Development Engineer - Embedded C, RTOS, 3GPP comms protocols; Cambridge, to 35k

Strong embedded C development skills are essential, ideally in a real-time environment with 3GPP comms protocol stack experience. Keywords: embedded ...

Microsoft SQL DBA - Contract - Suffolk

You will be MCP qualified in Installing, configuring, administering Microsoft SQL Server 2000 Enterprise Edition and Designing and Implementing ...

FIX Protocol Support - Perl - Electronic Trading - Permanent - London

FIX Support Analyst with strong client facing skills required for a leading boutique financial software organisation. Based in the City of London, ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: