Published: 01/04/2015 Updated: 22/12/2016

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

The default slapd configuration in the Debian openldap package 2.4.23-3 up to and including 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openldap openldap 2.4.23
openldap openldap 2.4.30
openldap openldap 2.4.24
openldap openldap 2.4.25
openldap openldap 2.4.32
openldap openldap 2.4.33
openldap openldap 2.4.26
openldap openldap 2.4.27
openldap openldap 2.4.34
openldap openldap 2.4.35
openldap openldap 2.4.31
openldap openldap 2.4.39
openldap openldap 2.4.28
openldap openldap 2.4.29
openldap openldap 2.4.36
openldap openldap 2.4.37
openldap openldap 2.4.38
debian debian linux 7.0

Several security issues were fixed in OpenLDAP ...

Debian Bug report logs - #776988 openldap: CVE-2015-1545: crashes on search with deref control and empty attr list Package: slapd; Maintainer for slapd is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Source for slapd is src:openldap (PTS, buildd, popcon) Reported by: Ryan Tandy <ryan@nardisca ...

Debian Bug report logs - #761406 slapd: CVE-2014-9713: dangerous access rule in default config Package: slapd; Maintainer for slapd is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Source for slapd is src:openldap (PTS, buildd, popcon) Reported by: Dietrich Clauss <dietrich@clauss-itcom> ...

Multiple vulnerabilities were found in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol CVE-2013-4449 Michael Vishchers from Seven Principles AG discovered a denial of service vulnerability in slapd, the directory server implementation When the server is configured to used the RWM overlay, an attacker ...

CWE-264 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406 http://www.openwall.com/lists/oss-security/2015/03/29/2 http://www.debian.org/security/2015/dsa-3209 http://www.securityfocus.com/bid/73217 http://www.ubuntu.com/usn/USN-2742-1 https://usn.ubuntu.com/2742-1/https://nvd.nist.gov

CVE-2014-9713

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect