Unscored severity · published Sep 7, 2006
CVE-2006-4600
slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN)
–
CVSS
2.8%
EPSS
No
On KEV
Description
slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openldap · Openldap
2.0.20; 2.0.21; 2.0.22; 2.0.23; 2.0.24 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4600
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4600
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
Patch
http://secunia.com/advisories/21721
secunia.com
http://secunia.com/advisories/22219
secunia.com
http://secunia.com/advisories/22273
secunia.com
http://secunia.com/advisories/22300
More from Openldap
9.8
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query
9.8
CVE-2010-0211
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a…
7.5
CVE-2023-2953
A vulnerability was found in openldap
7.5
CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56
7.5
CVE-2020-25709
A flaw was found in OpenLDAP