CVE-2006-2754

Published: Jun 1, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.

Affected (12)

Products: Openldap: Openldap

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Version 2.2.11
Openldap Openldap	Version 2.2.12
Openldap Openldap	Version 2.2.13
Openldap Openldap	Version 2.2.14
Openldap Openldap	Version 2.2.15
Openldap Openldap	Version 2.2.16
Openldap Openldap	Version 2.2.17
Openldap Openldap	Version 2.2.18
Openldap Openldap	Version 2.2.19
Openldap Openldap	Version 2.2.1
Openldap Openldap	Version 2.2.20
Openldap Openldap	Version 2.2.21

References (28)

http://secunia.com/advisories/20126

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20495

Source: cve@mitre.org

http://secunia.com/advisories/20685

Source: cve@mitre.org

http://secunia.com/advisories/20848

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200606-17.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:096

Source: cve@mitre.org

http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c.diff?r1=1.21&r2=1.22&hideattic=1&sortbydate=0&f=h

Source: cve@mitre.org

Patch

http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22

Source: cve@mitre.org

Patch

http://www.openldap.org/software/release/changes.html

Source: cve@mitre.org

Patch

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.008-openldap.html

Source: cve@mitre.org

Patch

http://www.osvdb.org/25659

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/436674/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1921

Source: cve@mitre.org

https://usn.ubuntu.com/305-1/

Source: cve@mitre.org

http://secunia.com/advisories/20126

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20495

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20685

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20848

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200606-17.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:096

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c.diff?r1=1.21&r2=1.22&hideattic=1&sortbydate=0&f=h

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openldap.org/software/release/changes.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.008-openldap.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.osvdb.org/25659

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/436674/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1921

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/305-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.