exploits , vulnerabilities , articles , OpenLDAP SLAPD Access Control Circumvention Vulnerability

Title	OpenLDAP SLAPD Access Control Circumvention Vulnerability
Published	2006-09-04-12:00AM
Updated	2006-09-04-12:00AM
Class	Access Validation Error
CVE
Remote	Yes
Local	No
Credit	Howard Chu discovered this issue.
Vulnerable	OpenLDAP OpenLDAP 2.2.15 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 OpenLDAP OpenLDAP 2.2.6 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 OpenLDAP OpenLDAP 2.1.30 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 OpenLDAP OpenLDAP 2.1.25 Trustix Secure Enterprise Linux 2.0 Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 OpenLDAP OpenLDAP 2.1.22 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 OpenLDAP OpenLDAP 2.1.19 OpenLDAP OpenLDAP 2.1.18 OpenLDAP OpenLDAP 2.1.17 OpenLDAP OpenLDAP 2.1.16 Conectiva Linux 9.0 OpenLDAP OpenLDAP 2.1.15 OpenLDAP OpenLDAP 2.1.14 OpenLDAP OpenLDAP 2.1.13 OpenLDAP OpenLDAP 2.1.12 S.u.S.E. Linux Personal 8.2 OpenLDAP OpenLDAP 2.1.11 OpenLDAP OpenLDAP 2.1.10 OpenLDAP OpenLDAP 2.1.4 Conectiva Linux Enterprise Edition 1.0 OpenLDAP OpenLDAP 2.1 .20 OpenLDAP OpenLDAP 2.0.27 OpenLDAP OpenLDAP 2.0.25 Conectiva Linux 8.0 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.2 MandrakeSoft Linux Mandrake 9.0 RedHat Linux 8.0 i386 RedHat Linux 8.0 OpenLDAP OpenLDAP 2.0.23 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 RedHat Linux 7.3 i386 RedHat Linux 7.3 S.u.S.E. Linux 8.0 OpenLDAP OpenLDAP 2.0.22 OpenLDAP OpenLDAP 2.0.21 Conectiva Linux 7.0 Conectiva Linux 6.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 OpenLDAP OpenLDAP 2.0.20 OpenLDAP OpenLDAP 2.0.19 Conectiva Linux 7.0 Conectiva Linux 6.0 OpenLDAP OpenLDAP 2.0.18 Conectiva Linux 7.0 Conectiva Linux 6.0 OpenLDAP OpenLDAP 2.0.17 Conectiva Linux 7.0 Conectiva Linux 6.0 OpenLDAP OpenLDAP 2.0.16 OpenLDAP OpenLDAP 2.0.15 Conectiva Linux 7.0 Conectiva Linux 6.0 OpenLDAP OpenLDAP 2.0.14 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.1 OpenLDAP OpenLDAP 2.0.13 OpenLDAP OpenLDAP 2.0.12 S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 OpenLDAP OpenLDAP 2.0.11 9 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1.1 OpenLDAP OpenLDAP 2.0.11 11S Caldera OpenLinux eBuilder 3.0 SCO eServer 2.3.1 OpenLDAP OpenLDAP 2.0.11 11 Caldera OpenLinux 3.1 IA64 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 OpenLDAP OpenLDAP 2.0.11 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux 7.0 Conectiva Linux 6.0 HP Secure OS software for Linux 1.0 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.2 alpha RedHat Linux 7.2 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 OpenLDAP OpenLDAP 2.0.10 OpenLDAP OpenLDAP 2.0.9 OpenLDAP OpenLDAP 2.0.8 OpenLDAP OpenLDAP 2.0.7 Caldera OpenLinux 3.1 IA64 Caldera OpenLinux eBuilder 3.0 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1 HP Secure OS software for Linux 1.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 RedHat Linux 7.1 ia64 RedHat Linux 7.1 i386 RedHat Linux 7.1 alpha RedHat Linux 7.1 SCO eServer 2.3.1 OpenLDAP OpenLDAP 2.0.6 OpenLDAP OpenLDAP 2.0.5 OpenLDAP OpenLDAP 2.0.4 OpenLDAP OpenLDAP 2.0.3 OpenLDAP OpenLDAP 2.0.2 OpenLDAP OpenLDAP 2.0.1 OpenLDAP OpenLDAP 2.0
Not Vulnerable	OpenLDAP OpenLDAP 2.3.25
Code	An exploit is not required.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
2009-12-17 Drupal Sections Module HTML Injection Vulnerability
2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability