7.5

CVE-2006-5779

Exploit
OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openldap ≫ Openldap Version < 2.3.29
Canonical ≫ Ubuntu Linux Version5.10
Canonical ≫ Ubuntu Linux Version6.06
Canonical ≫ Ubuntu Linux Version6.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 75.37% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz
Exploit
Broken Link
http://gleg.net/vulndisco_meta.shtml
Exploit
Broken Link
http://secunia.com/advisories/22750
Vendor Advisory
Broken Link
http://secunia.com/advisories/22953
Vendor Advisory
Broken Link
http://secunia.com/advisories/22996
Vendor Advisory
Broken Link
http://secunia.com/advisories/23125
Vendor Advisory
Broken Link
http://secunia.com/advisories/23133
Vendor Advisory
Broken Link
http://secunia.com/advisories/23152
Vendor Advisory
Broken Link
http://secunia.com/advisories/23170
Vendor Advisory
Broken Link
http://security.gentoo.org/glsa/glsa-200611-25.xml
Third Party Advisory
http://securityreason.com/securityalert/1831
Broken Link
http://securitytracker.com/id?1017166
Third Party Advisory
Exploit
Broken Link
VDB Entry
http://www.mandriva.com/security/advisories?name=MDKSA-2006:208
Broken Link
http://www.novell.com/linux/security/advisories/2006_72_openldap2.html
Broken Link
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4740
Exploit
Issue Tracking
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.033-openldap.html
Broken Link
http://www.securityfocus.com/archive/1/450728/100/0/threaded
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/20939
Third Party Advisory
Exploit
Broken Link
VDB Entry
http://www.trustix.org/errata/2006/0066/
Broken Link
http://www.ubuntu.com/usn/usn-384-1
Third Party Advisory
http://www.vupen.com/english/advisories/2006/4379
Vendor Advisory
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/30076
Third Party Advisory
VDB Entry
https://issues.rpath.com/browse/RPL-820
Broken Link