CVE-2006-4600

2006-09-0700:04:00

mitre

web.nvd.nist.gov

openldap

vulnerability

cve-2006-4600

remote access

acl

nvd

CVSS2

2.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:S/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.003

Percentile

70.2%

JSON

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).

Affected configurations

Nvd

Node

openldapopenldapMatch2.0.20

openldapopenldapMatch2.0.21

openldapopenldapMatch2.0.22

openldapopenldapMatch2.0.23

openldapopenldapMatch2.0.24

VendorProductVersionCPE
openldapopenldap2.0.20cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:*
openldapopenldap2.0.21cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:*
openldapopenldap2.0.22cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:*
openldapopenldap2.0.23cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:*
openldapopenldap2.0.24cpe:2.3:a:openldap:openldap:2.0.24:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openldap	openldap	2.0.20	cpe:2.3:a:openldap:openldap:2.0.20:::::::*
openldap	openldap	2.0.21	cpe:2.3:a:openldap:openldap:2.0.21:::::::*
openldap	openldap	2.0.22	cpe:2.3:a:openldap:openldap:2.0.22:::::::*
openldap	openldap	2.0.23	cpe:2.3:a:openldap:openldap:2.0.23:::::::*
openldap	openldap	2.0.24	cpe:2.3:a:openldap:openldap:2.0.24:::::::*