Lucene search
HistoryDec 13, 2006 - 12:28 a.m.
CVE-2006-6493
buffer overflow
openldap
ldap_auth_krbv41
remote attackers
kerberos
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.118
Percentile
95.4%
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.
Affected configurations
Node
openldapopenldapRange≤2.4.3
ORopenldapopenldapMatch1.0
ORopenldapopenldapMatch1.0.1
ORopenldapopenldapMatch1.0.2
ORopenldapopenldapMatch1.0.3
ORopenldapopenldapMatch1.1
ORopenldapopenldapMatch1.1.0
ORopenldapopenldapMatch1.1.1
ORopenldapopenldapMatch1.1.2
ORopenldapopenldapMatch1.1.3
ORopenldapopenldapMatch1.1.4
ORopenldapopenldapMatch1.2
ORopenldapopenldapMatch1.2.0
ORopenldapopenldapMatch1.2.1
ORopenldapopenldapMatch1.2.2
ORopenldapopenldapMatch1.2.3
ORopenldapopenldapMatch1.2.4
ORopenldapopenldapMatch1.2.5
ORopenldapopenldapMatch1.2.6
ORopenldapopenldapMatch1.2.7
ORopenldapopenldapMatch1.2.8
ORopenldapopenldapMatch1.2.9
ORopenldapopenldapMatch1.2.10
ORopenldapopenldapMatch1.2.11
ORopenldapopenldapMatch1.2.12
ORopenldapopenldapMatch1.2.13
ORopenldapopenldapMatch2.0
ORopenldapopenldapMatch2.0.0
ORopenldapopenldapMatch2.0.1
ORopenldapopenldapMatch2.0.2
ORopenldapopenldapMatch2.0.3
ORopenldapopenldapMatch2.0.4
ORopenldapopenldapMatch2.0.5
ORopenldapopenldapMatch2.0.6
ORopenldapopenldapMatch2.0.7
ORopenldapopenldapMatch2.0.8
ORopenldapopenldapMatch2.0.9
ORopenldapopenldapMatch2.0.10
ORopenldapopenldapMatch2.0.11
ORopenldapopenldapMatch2.0.11_9
ORopenldapopenldapMatch2.0.11_11
ORopenldapopenldapMatch2.0.11_11s
ORopenldapopenldapMatch2.0.12
ORopenldapopenldapMatch2.0.13
ORopenldapopenldapMatch2.0.14
ORopenldapopenldapMatch2.0.15
ORopenldapopenldapMatch2.0.16
ORopenldapopenldapMatch2.0.17
ORopenldapopenldapMatch2.0.18
ORopenldapopenldapMatch2.0.19
ORopenldapopenldapMatch2.0.20
ORopenldapopenldapMatch2.0.21
ORopenldapopenldapMatch2.0.22
ORopenldapopenldapMatch2.0.23
ORopenldapopenldapMatch2.0.24
ORopenldapopenldapMatch2.0.25
ORopenldapopenldapMatch2.0.26
ORopenldapopenldapMatch2.0.27
ORopenldapopenldapMatch2.1.2
ORopenldapopenldapMatch2.1.3
ORopenldapopenldapMatch2.1.4
ORopenldapopenldapMatch2.1.5
ORopenldapopenldapMatch2.1.6
ORopenldapopenldapMatch2.1.7
ORopenldapopenldapMatch2.1.8
ORopenldapopenldapMatch2.1.9
ORopenldapopenldapMatch2.1.10
ORopenldapopenldapMatch2.1.11
ORopenldapopenldapMatch2.1.12
ORopenldapopenldapMatch2.1.13
ORopenldapopenldapMatch2.1.14
ORopenldapopenldapMatch2.1.15
ORopenldapopenldapMatch2.1.16
ORopenldapopenldapMatch2.1.17
ORopenldapopenldapMatch2.1.18
ORopenldapopenldapMatch2.1.19
ORopenldapopenldapMatch2.1.20
ORopenldapopenldapMatch2.1.21
ORopenldapopenldapMatch2.1.22
ORopenldapopenldapMatch2.1.23
ORopenldapopenldapMatch2.1.24
ORopenldapopenldapMatch2.1.25
ORopenldapopenldapMatch2.1.26
ORopenldapopenldapMatch2.1.27
ORopenldapopenldapMatch2.1.28
ORopenldapopenldapMatch2.1.29
ORopenldapopenldapMatch2.1.30
ORopenldapopenldapMatch2.1_.20
ORopenldapopenldapMatch2.2.0
ORopenldapopenldapMatch2.2.1
ORopenldapopenldapMatch2.2.4
ORopenldapopenldapMatch2.2.5
ORopenldapopenldapMatch2.2.6
ORopenldapopenldapMatch2.2.7
ORopenldapopenldapMatch2.2.8
ORopenldapopenldapMatch2.2.9
ORopenldapopenldapMatch2.2.10
ORopenldapopenldapMatch2.2.11
ORopenldapopenldapMatch2.2.12
ORopenldapopenldapMatch2.2.13
ORopenldapopenldapMatch2.2.14
ORopenldapopenldapMatch2.2.15
ORopenldapopenldapMatch2.2.16
ORopenldapopenldapMatch2.2.17
ORopenldapopenldapMatch2.2.18
ORopenldapopenldapMatch2.2.19
ORopenldapopenldapMatch2.2.20
ORopenldapopenldapMatch2.2.21
ORopenldapopenldapMatch2.2.22
ORopenldapopenldapMatch2.2.23
ORopenldapopenldapMatch2.2.24
ORopenldapopenldapMatch2.2.25
ORopenldapopenldapMatch2.2.26
ORopenldapopenldapMatch2.2.27
ORopenldapopenldapMatch2.2.28_r2
ORopenldapopenldapMatch2.3.27_2_2006-10-18
ORopenldapopenldapMatch2.3.28_2_2006-10-22
ORopenldapopenldapMatch2.3.28_2006-10-22
ORopenldapopenldapMatch2.3.28_e1.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openldap | openldap | * | cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* |
| openldap | openldap | 1.0 | cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:* |
| openldap | openldap | 1.0.1 | cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:* |
| openldap | openldap | 1.0.2 | cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:* |
| openldap | openldap | 1.0.3 | cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:* |
| openldap | openldap | 1.1 | cpe:2.3:a:openldap:openldap:1.1:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.0 | cpe:2.3:a:openldap:openldap:1.1.0:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.1 | cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.2 | cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:* |
| openldap | openldap | 1.1.3 | cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-6493
2006-12-13 00:00:00
cve
cve
CVE-2006-6493
2006-12-13 00:28:00
ubuntucve
ubuntucve
CVE-2006-6493
2006-12-13 00:00:00
redhatcve
redhatcve
CVE-2006-6493
2015-10-30 10:17:35
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against OpenLDAP Remote Buffer Overflow Vulnerability
2006-12-20 00:00:00
exploitdb
exploitdb
OpenLDAP 2.4.3 - 'KBIND' Remote Buffer Overflow
2006-12-15 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.118
Percentile
95.4%
Related for NVD:CVE-2006-6493