OP
Product
Openldap
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 21Medium 4Low 0
Watch
Add Openldap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0823 | – | Sep 7 | OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt)… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1; 1.1.1; +34 more |
| CVE-2003-1201 | – | Mar 20 | ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an… Affected: through 2.1.12 |
| CVE-2002-1508 | – | Feb 19 | slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication… Affected: through 2.2.0 |
| CVE-2002-1379 | – | Jan 2 | OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with… Affected: through 2.2.0 |
| CVE-2002-1378 | – | Jan 2 | Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious… Affected: through 2.2.0 |
| CVE-2002-0045 | – | Jan 31 | slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes… Affected: through 2.0.19; 2.0 |
| CVE-2001-0977 | – | Jul 16 | slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1; 1.1.1; +24 more |
| CVE-2000-0748 | – | Oct 20 | OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse Affected: 1.2.7; 1.2.8; 1.2.9; 1.2.10; 1.2.11 |
| CVE-2000-0336 | – | Apr 21 | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack Affected: 1.2.7; 1.2.8; 1.2.9; 1.2.10 |