CVE-2006-4600

EPSS 0.1%
Published 07.09.2006 00:04:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).

Affected products Warnungen 0 Metrics 2 CWE 0 References 32

Data is provided by the National Vulnerability Database (NVD)

Openldap ≫ Openldap Version2.0.20

Openldap ≫ Openldap Version2.0.21

Openldap ≫ Openldap Version2.0.22

Openldap ≫ Openldap Version2.0.23

Openldap ≫ Openldap Version2.0.24

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.29

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.3	4.4	2.9	AV:A/AC:M/Au:S/C:N/I:P/A:N

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

http://secunia.com/advisories/25894

http://secunia.com/advisories/26909

http://secunia.com/advisories/27706

http://security.gentoo.org/glsa/glsa-200711-23.xml

http://www.vupen.com/english/advisories/2007/3229

http://secunia.com/advisories/25098

http://www.openldap.org/software/release/changes.html

Patch

http://secunia.com/advisories/21721

Patch

Vendor Advisory

http://secunia.com/advisories/22219

http://secunia.com/advisories/22273

http://secunia.com/advisories/22300

http://secunia.com/advisories/25628

http://secunia.com/advisories/25676

http://securitytracker.com/id?1016783

http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm

http://www.mandriva.com/security/advisories?name=MDKSA-2006:171

http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587

Patch

http://www.openldap.org/lists/openldap-announce/200608/msg00000.html

Patch

http://www.redhat.com/support/errata/RHSA-2007-0310.html

http://www.redhat.com/support/errata/RHSA-2007-0430.html

http://www.securityfocus.com/archive/1/447395/100/200/threaded

http://www.securityfocus.com/bid/19832

Patch

http://www.trustix.org/errata/2006/0055

http://www.vupen.com/english/advisories/2007/2186

https://exchange.xforce.ibmcloud.com/vulnerabilities/28772

https://issues.rpath.com/browse/RPL-667

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9618

https://nvd.nist.gov/vuln/detail/CVE-2006-4600

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4600

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4600

EUVD