CVE-2006-4600

Description (CNA)

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm
• http://secunia.com/advisories/22300
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:171
• http://secunia.com/advisories/25098
• http://security.gentoo.org/glsa/glsa-200711-23.xml
• http://secunia.com/advisories/25894
• http://www.openldap.org/lists/openldap-announce/200608/msg00000.html
• https://issues.rpath.com/browse/RPL-667
• http://www.vupen.com/english/advisories/2007/3229
• http://www.trustix.org/errata/2006/0055
• http://www.securityfocus.com/archive/1/447395/100/200/threaded
• http://secunia.com/advisories/22273
• http://secunia.com/advisories/25628
• http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587
• http://www.redhat.com/support/errata/RHSA-2007-0430.html
• http://www.vupen.com/english/advisories/2007/2186
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28772
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9618
• http://www.securityfocus.com/bid/19832
• http://www.redhat.com/support/errata/RHSA-2007-0310.html
• http://secunia.com/advisories/26909
• http://secunia.com/advisories/27706
• http://securitytracker.com/id?1016783
• http://www.openldap.org/software/release/changes.html
• http://secunia.com/advisories/22219
• http://secunia.com/advisories/25676
• http://secunia.com/advisories/21721

ADP enrichment