Openldap

openldap

Vendor: Openldap • 59 CVEs

CVEs (59)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-0658 1Openldap 1Openldap Apr 23, 2026 Feb 13, 2008 N/A· v4 N/A· v3 4.0 MEDIUM· v2 slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a re...Show more slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.Show less
CVE-2007-6698 1Openldap 1Openldap Apr 23, 2026 Feb 1, 2008 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due...Show more The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.Show less
CVE-2007-5708 1Openldap 1Openldap Apr 23, 2026 Oct 30, 2007 N/A· v4 N/A· v3 7.1 HIGH· v2 slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized prope...Show more slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated.Show less
CVE-2007-5707 1Openldap 1Openldap Apr 23, 2026 Oct 30, 2007 N/A· v4 N/A· v3 7.1 HIGH· v2 OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are...Show more OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.Show less
CVE-2006-6493 1Openldap 1Openldap Apr 23, 2026 Dec 13, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arb...Show more Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.Show less
CVE-2006-5779 2Canonical Openldap 2Openldap Ubuntu Linux Apr 23, 2026 Nov 7, 2006 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.
CVE-2006-4600 1Openldap 1Openldap Apr 16, 2026 Sep 7, 2006 N/A· v4 N/A· v3 2.3 LOW· v2 slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).
CVE-2006-2754 1Openldap 1Openldap Apr 16, 2026 Jun 1, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.
CVE-2005-4442 1Openldap 1Openldap Apr 16, 2026 Dec 21, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is...Show more Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.Show less
CVE-2004-1880 1Openldap 1Openldap Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption).
CVE-2004-0823 2Apple Openldap 3Mac Os X Mac Os X ServerOpenldap Apr 16, 2026 Sep 7, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if th...Show more OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.Show less
CVE-2003-1201 1Openldap 1Openldap Apr 16, 2026 Mar 20, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote...Show more ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).Show less
CVE-2002-1508 1Openldap 1Openldap Apr 16, 2026 Feb 19, 2003 N/A· v4 N/A· v3 1.2 LOW· v2 slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.
CVE-2002-1379 1Openldap 1Openldap Apr 16, 2026 Jan 2, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.
CVE-2002-1378 1Openldap 1Openldap Apr 16, 2026 Jan 2, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly...Show more Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.Show less
CVE-2002-0045 2Openldap Redhat 2Linux Openldap Apr 16, 2026 Jan 31, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes tha...Show more slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.Show less
CVE-2001-0977 4Debian MandrakesoftOpenldap+1 more 6Debian Linux LinuxMandrake Linux+3 more Apr 16, 2026 Jul 16, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
CVE-2000-0748 1Openldap 1Openldap Apr 16, 2026 Oct 20, 2000 N/A· v4 N/A· v3 4.6 MEDIUM· v2 OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
CVE-2000-0336 4Mandrakesoft OpenldapRedhat+1 more 4Linux Mandrake LinuxOpenldap+1 more Apr 16, 2026 Apr 21, 2000 N/A· v4 N/A· v3 2.1 LOW· v2 Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

Previous 1 23