CVE-2014-9713

Published: Apr 1, 2015Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.

Affected (18)

Products: Openldap: Openldap · Debian: Debian Linux

1 product

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Version 2.4.23
Openldap Openldap	Version 2.4.24
Openldap Openldap	Version 2.4.25
Openldap Openldap	Version 2.4.26
Openldap Openldap	Version 2.4.27
Openldap Openldap	Version 2.4.28
Openldap Openldap	Version 2.4.29
Openldap Openldap	Version 2.4.30
Openldap Openldap	Version 2.4.31
Openldap Openldap	Version 2.4.32
Openldap Openldap	Version 2.4.33
Openldap Openldap	Version 2.4.34
Openldap Openldap	Version 2.4.35
Openldap Openldap	Version 2.4.36
Openldap Openldap	Version 2.4.37
Openldap Openldap	Version 2.4.38
Openldap Openldap	Version 2.4.39