Viewing Incoming/7441
Full headers

Major security issue: yes  no

Notes:

Notification:

Date: Fri, 16 Nov 2012 16:40:54 +0000
From: h.b.furuseth@usit.uio.no
To: openldap-its@OpenLDAP.org
Subject: cn=config filters ignore {number}

Full_Name: Hallvard B Furuseth
Version: 2.4.33
OS: Linux x86_64
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (2001:700:100:556::233)
Submitted by: hallvard


cn=config ignores the {number} prefix in filters:
  "(olcDatabase={2}hdb)" -> matches all HDB databases
  "(olcdatabase={2})"    -> none
ldapcompare does the opposite:
  "olcdatabase:{2}hdb"   -> TRUE  (at DN olcdatabase={2}hdb,cn=config)
  "olcdatabase:{2}       -> FALSE
  "olcdatabase:hdb"      -> FALSE