Lucene search

K
freebsdFreeBSDAE7124FF-547C-11DB-8F1A-000A48049292
HistoryJun 14, 2006 - 12:00 a.m.

openldap -- slapd acl selfwrite Security Issue

2006-06-1400:00:00
vuxml.freebsd.org
14

2.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.8%

Howard Chu reports:

An ACL of the form ‘access to dn.subtree=“ou=groups,
dc=example,dc=com” attr=member by * selfwrite’ is intended
to only allow users to add/delete their own DN to the
target attribute. Currently it allows any DNs to be
modified.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopenldap-server< 2.3.25UNKNOWN
FreeBSDanynoarchopenldap-sasl-server< 2.3.25UNKNOWN

2.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.8%