5.1

CVE-2006-6493

Exploit

Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OpenldapOpenldap Version <= 2.4.3
OpenldapOpenldap Version1.0
OpenldapOpenldap Version1.0.1
OpenldapOpenldap Version1.0.2
OpenldapOpenldap Version1.0.3
OpenldapOpenldap Version1.1
OpenldapOpenldap Version1.1.0
OpenldapOpenldap Version1.1.1
OpenldapOpenldap Version1.1.2
OpenldapOpenldap Version1.1.3
OpenldapOpenldap Version1.1.4
OpenldapOpenldap Version1.2
OpenldapOpenldap Version1.2.0
OpenldapOpenldap Version1.2.1
OpenldapOpenldap Version1.2.2
OpenldapOpenldap Version1.2.3
OpenldapOpenldap Version1.2.4
OpenldapOpenldap Version1.2.5
OpenldapOpenldap Version1.2.6
OpenldapOpenldap Version1.2.7
OpenldapOpenldap Version1.2.8
OpenldapOpenldap Version1.2.9
OpenldapOpenldap Version1.2.10
OpenldapOpenldap Version1.2.11
OpenldapOpenldap Version1.2.12
OpenldapOpenldap Version1.2.13
OpenldapOpenldap Version2.0
OpenldapOpenldap Version2.0.0
OpenldapOpenldap Version2.0.1
OpenldapOpenldap Version2.0.2
OpenldapOpenldap Version2.0.3
OpenldapOpenldap Version2.0.4
OpenldapOpenldap Version2.0.5
OpenldapOpenldap Version2.0.6
OpenldapOpenldap Version2.0.7
OpenldapOpenldap Version2.0.8
OpenldapOpenldap Version2.0.9
OpenldapOpenldap Version2.0.10
OpenldapOpenldap Version2.0.11
OpenldapOpenldap Version2.0.11_9
OpenldapOpenldap Version2.0.11_11
OpenldapOpenldap Version2.0.11_11s
OpenldapOpenldap Version2.0.12
OpenldapOpenldap Version2.0.13
OpenldapOpenldap Version2.0.14
OpenldapOpenldap Version2.0.15
OpenldapOpenldap Version2.0.16
OpenldapOpenldap Version2.0.17
OpenldapOpenldap Version2.0.18
OpenldapOpenldap Version2.0.19
OpenldapOpenldap Version2.0.20
OpenldapOpenldap Version2.0.21
OpenldapOpenldap Version2.0.22
OpenldapOpenldap Version2.0.23
OpenldapOpenldap Version2.0.24
OpenldapOpenldap Version2.0.25
OpenldapOpenldap Version2.0.26
OpenldapOpenldap Version2.0.27
OpenldapOpenldap Version2.1.2
OpenldapOpenldap Version2.1.3
OpenldapOpenldap Version2.1.4
OpenldapOpenldap Version2.1.5
OpenldapOpenldap Version2.1.6
OpenldapOpenldap Version2.1.7
OpenldapOpenldap Version2.1.8
OpenldapOpenldap Version2.1.9
OpenldapOpenldap Version2.1.10
OpenldapOpenldap Version2.1.11
OpenldapOpenldap Version2.1.12
OpenldapOpenldap Version2.1.13
OpenldapOpenldap Version2.1.14
OpenldapOpenldap Version2.1.15
OpenldapOpenldap Version2.1.16
OpenldapOpenldap Version2.1.17
OpenldapOpenldap Version2.1.18
OpenldapOpenldap Version2.1.19
OpenldapOpenldap Version2.1.20
OpenldapOpenldap Version2.1.21
OpenldapOpenldap Version2.1.22
OpenldapOpenldap Version2.1.23
OpenldapOpenldap Version2.1.24
OpenldapOpenldap Version2.1.25
OpenldapOpenldap Version2.1.26
OpenldapOpenldap Version2.1.27
OpenldapOpenldap Version2.1.28
OpenldapOpenldap Version2.1.29
OpenldapOpenldap Version2.1.30
OpenldapOpenldap Version2.1_.20
OpenldapOpenldap Version2.2.0
OpenldapOpenldap Version2.2.1
OpenldapOpenldap Version2.2.4
OpenldapOpenldap Version2.2.5
OpenldapOpenldap Version2.2.6
OpenldapOpenldap Version2.2.7
OpenldapOpenldap Version2.2.8
OpenldapOpenldap Version2.2.9
OpenldapOpenldap Version2.2.10
OpenldapOpenldap Version2.2.11
OpenldapOpenldap Version2.2.12
OpenldapOpenldap Version2.2.13
OpenldapOpenldap Version2.2.14
OpenldapOpenldap Version2.2.15
OpenldapOpenldap Version2.2.16
OpenldapOpenldap Version2.2.17
OpenldapOpenldap Version2.2.18
OpenldapOpenldap Version2.2.19
OpenldapOpenldap Version2.2.20
OpenldapOpenldap Version2.2.21
OpenldapOpenldap Version2.2.22
OpenldapOpenldap Version2.2.23
OpenldapOpenldap Version2.2.24
OpenldapOpenldap Version2.2.25
OpenldapOpenldap Version2.2.26
OpenldapOpenldap Version2.2.27
OpenldapOpenldap Version2.2.28_r2
OpenldapOpenldap Version2.3.27_2_2006-10-18
OpenldapOpenldap Version2.3.28_2_2006-10-22
OpenldapOpenldap Version2.3.28_2006-10-22
OpenldapOpenldap Version2.3.28_e1.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.43% 0.919
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P