Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-1025HistoryMar 20, 2011 - 2:00 a.m.
CVE-2011-1025
2011-03-2002:00:03
Debian Security Bug Tracker
security-tracker.debian.org
18
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.018
Percentile
88.3%
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openldap | < 2.4.25-1 | openldap_2.4.25-1_all.deb |
| Debian | 11 | all | openldap | < 2.4.25-1 | openldap_2.4.25-1_all.deb |
| Debian | 999 | all | openldap | < 2.4.25-1 | openldap_2.4.25-1_all.deb |
| Debian | 13 | all | openldap | < 2.4.25-1 | openldap_2.4.25-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2011-1025
2011-03-19 00:00:00
nvd
nvd
CVE-2011-1025
2011-03-20 02:00:03
cve
cve
CVE-2011-1025
2011-03-20 02:00:03
cvelist
cvelist
CVE-2011-1025
2011-03-20 01:00:00
prion
prion
Authentication flaw
2011-03-20 02:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: openldap-2.4.23-10.fc14
2011-09-25 03:47:40
[SECURITY] Fedora 15 Update: openldap-2.4.24-2.fc15
2011-04-21 05:33:29
ubuntu
ubuntu
OpenLDAP vulnerabilities
2011-03-31 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : openldap (MDVSA-2011:056)
2011-03-31 00:00:00
Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : openldap, openldap2.3 vulnerabilities (USN-1100-1)
2011-04-01 00:00:00
RHEL 5 : openldap (RHSA-2011:0346)
2011-03-11 00:00:00
openvas
openvas
FreeBSD Ports: openldap-server
2011-03-05 00:00:00
Mandriva Update for openldap MDVSA-2011:056 (openldap)
2011-04-01 00:00:00
Mandriva Update for openldap MDVSA-2011:056 (openldap)
2011-04-01 00:00:00
oraclelinux
oraclelinux
openldap security update
2011-03-10 00:00:00
redhat
redhat
(RHSA-2011:0347) Moderate: openldap security update
2011-03-10 00:00:00
gentoo
gentoo
OpenLDAP: Multiple vulnerabilities
2014-06-30 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.018
Percentile
88.3%
Related for DEBIANCVE:CVE-2011-1025