← Back

CVE-2006-6493

nvd nist
Published: Dec 13, 2006Modified: Apr 23, 2026

JSON object

Loading...
5.1
Vector
AV:N/AC:H/Au:N/C:P/I:P/A:P
Exploitability: 4.9 / Impact: 6.4
Source: NVD

Description

Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.

Affected (119)

Products: Openldap: Openldap
1 product
Openldap
Configuration A
119 vulnerable
Vulnerable SoftwareAffected Versions
Openldap
Up to 2.4.3
Version 1.0.1
Version 1.0.2
Version 1.0.3
Version 1.0
Version 1.1.0
Version 1.1.1
Version 1.1.2
Version 1.1.3
Version 1.1.4
Version 1.1
Version 1.2.0
Version 1.2.10
Version 1.2.11
Version 1.2.12
Version 1.2.13
Version 1.2.1
Version 1.2.2
Version 1.2.3
Version 1.2.4
Version 1.2.5
Version 1.2.6
Version 1.2.7
Version 1.2.8
Version 1.2.9
Version 1.2
Version 2.0.0
Version 2.0.10
Version 2.0.11
Version 2.0.11_11
Version 2.0.11_11s
Version 2.0.11_9
Version 2.0.12
Version 2.0.13
Version 2.0.14
Version 2.0.15
Version 2.0.16
Version 2.0.17
Version 2.0.18
Version 2.0.19
Version 2.0.1
Version 2.0.20
Version 2.0.21
Version 2.0.22
Version 2.0.23
Version 2.0.24
Version 2.0.25
Version 2.0.26
Version 2.0.27
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.0.5
Version 2.0.6
Version 2.0.7
Version 2.0.8
Version 2.0.9
Version 2.0
Version 2.1.10
Version 2.1.11
Version 2.1.12
Version 2.1.13
Version 2.1.14
Version 2.1.15
Version 2.1.16
Version 2.1.17
Version 2.1.18
Version 2.1.19
Version 2.1.20
Version 2.1.21
Version 2.1.22
Version 2.1.23
Version 2.1.24
Version 2.1.25
Version 2.1.26
Version 2.1.27
Version 2.1.28
Version 2.1.29
Version 2.1.2
Version 2.1.30
Version 2.1.3
Version 2.1.4
Version 2.1.5
Version 2.1.6
Version 2.1.7
Version 2.1.8
Version 2.1.9
Version 2.1_.20
Version 2.2.0
Version 2.2.10
Version 2.2.11
Version 2.2.12
Version 2.2.13
Version 2.2.14
Version 2.2.15
Version 2.2.16
Version 2.2.17
Version 2.2.18
Version 2.2.19
Version 2.2.1
Version 2.2.20
Version 2.2.21
Version 2.2.22
Version 2.2.23
Version 2.2.24
Version 2.2.25
Version 2.2.26
Version 2.2.27
Version 2.2.28_r2
Version 2.2.4
Version 2.2.5
Version 2.2.6
Version 2.2.7
Version 2.2.8
Version 2.2.9
Version 2.3.27_2_2006-10-18
Version 2.3.28_2006-10-22
Version 2.3.28_2_2006-10-22
Version 2.3.28_e1.0.0

References (10)

Source: cve@mitre.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.