CVE-2006-4600
- State
- Published
- Severity
- Not scored
- Published
- Sep 7, 2006
- Updated
- Aug 7, 2024
- Reserved
- Sep 6, 2006
Description
slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm
- 22300third-party-advisory
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Playermailing-list
- MDKSA-2006:171vendor-advisory
- 25098third-party-advisory
- GLSA-200711-23vendor-advisory
- 25894third-party-advisory
- [openldap-announce] 20060801 OpenLDAP 2.3.25 availablemailing-list
- https://issues.rpath.com/browse/RPL-667
- ADV-2007-3229vdb-entry
- 2006-0055vendor-advisory
- 20060929 rPSA-2006-0176-1 openldap openldap-clients openldap-serversmailing-list
- 22273third-party-advisory
- 25628third-party-advisory
- http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587
- RHSA-2007:0430vendor-advisory
- ADV-2007-2186vdb-entry
- openldap-selfwrite-security-bypass(28772)vdb-entry
- oval:org.mitre.oval:def:9618vdb-entrysignature
- 19832vdb-entry
- RHSA-2007:0310vendor-advisory
- 26909third-party-advisory
- 27706third-party-advisory
- 1016783vdb-entry
- http://www.openldap.org/software/release/changes.html
- 22219third-party-advisory
- 25676third-party-advisory
- 21721third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.