Lucene search

[email protected]NVD:CVE-2007-5707

HistoryOct 30, 2007 - 7:46 p.m.

CVE-2007-5707

2007-10-3019:46:00

CWE-399

[email protected]

web.nvd.nist.gov

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

High

0.045 Low

EPSS

Percentile

92.5%

JSON

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

Affected configurations

NVD

Node

openldapopenldapMatch1.0

openldapopenldapMatch1.0.1

openldapopenldapMatch1.0.2

openldapopenldapMatch1.0.3

openldapopenldapMatch1.1

openldapopenldapMatch1.1.0

openldapopenldapMatch1.1.1

openldapopenldapMatch1.1.2

openldapopenldapMatch1.1.3

openldapopenldapMatch1.1.4

openldapopenldapMatch1.2

openldapopenldapMatch1.2.0

openldapopenldapMatch1.2.1

openldapopenldapMatch1.2.2

openldapopenldapMatch1.2.3

openldapopenldapMatch1.2.4

openldapopenldapMatch1.2.5

openldapopenldapMatch1.2.6

openldapopenldapMatch1.2.7

openldapopenldapMatch1.2.8

openldapopenldapMatch1.2.9

openldapopenldapMatch1.2.10

openldapopenldapMatch1.2.11

openldapopenldapMatch1.2.12

openldapopenldapMatch1.2.13

openldapopenldapMatch2.0

openldapopenldapMatch2.0.0

openldapopenldapMatch2.0.1

openldapopenldapMatch2.0.2

openldapopenldapMatch2.0.3

openldapopenldapMatch2.0.4

openldapopenldapMatch2.0.5

openldapopenldapMatch2.0.6

openldapopenldapMatch2.0.7

openldapopenldapMatch2.0.8

openldapopenldapMatch2.0.9

openldapopenldapMatch2.0.10

openldapopenldapMatch2.0.11

openldapopenldapMatch2.0.11_9

openldapopenldapMatch2.0.11_11

openldapopenldapMatch2.0.11_11s

openldapopenldapMatch2.0.12

openldapopenldapMatch2.0.13

openldapopenldapMatch2.0.14

openldapopenldapMatch2.0.15

openldapopenldapMatch2.0.16

openldapopenldapMatch2.0.17

openldapopenldapMatch2.0.18

openldapopenldapMatch2.0.19

openldapopenldapMatch2.0.20

openldapopenldapMatch2.0.21

openldapopenldapMatch2.0.22

openldapopenldapMatch2.0.23

openldapopenldapMatch2.0.24

openldapopenldapMatch2.0.25

openldapopenldapMatch2.0.26

openldapopenldapMatch2.0.27

openldapopenldapMatch2.1.2

openldapopenldapMatch2.1.3

openldapopenldapMatch2.1.4

openldapopenldapMatch2.1.5

openldapopenldapMatch2.1.6

openldapopenldapMatch2.1.7

openldapopenldapMatch2.1.8

openldapopenldapMatch2.1.9

openldapopenldapMatch2.1.10

openldapopenldapMatch2.1.11

openldapopenldapMatch2.1.12

openldapopenldapMatch2.1.13

openldapopenldapMatch2.1.14

openldapopenldapMatch2.1.15

openldapopenldapMatch2.1.16

openldapopenldapMatch2.1.17

openldapopenldapMatch2.1.18

openldapopenldapMatch2.1.19

openldapopenldapMatch2.1.20

openldapopenldapMatch2.1.21

openldapopenldapMatch2.1.22

openldapopenldapMatch2.1.23

openldapopenldapMatch2.1.24

openldapopenldapMatch2.1.25

openldapopenldapMatch2.1.26

openldapopenldapMatch2.1.27

openldapopenldapMatch2.1.28

openldapopenldapMatch2.1.29

openldapopenldapMatch2.1.30

openldapopenldapMatch2.1_.20

openldapopenldapMatch2.2.0

openldapopenldapMatch2.2.1

openldapopenldapMatch2.2.4

openldapopenldapMatch2.2.5

openldapopenldapMatch2.2.6

openldapopenldapMatch2.2.7

openldapopenldapMatch2.2.8

openldapopenldapMatch2.2.9

openldapopenldapMatch2.2.10

openldapopenldapMatch2.2.11

openldapopenldapMatch2.2.12

openldapopenldapMatch2.2.13

openldapopenldapMatch2.2.14

openldapopenldapMatch2.2.15

openldapopenldapMatch2.2.16

openldapopenldapMatch2.2.17

openldapopenldapMatch2.2.18

openldapopenldapMatch2.2.19

openldapopenldapMatch2.2.20

openldapopenldapMatch2.2.21

openldapopenldapMatch2.2.22

openldapopenldapMatch2.2.23

openldapopenldapMatch2.2.24

openldapopenldapMatch2.2.25

openldapopenldapMatch2.2.26

openldapopenldapMatch2.2.27

openldapopenldapMatch2.2.28_r2

openldapopenldapMatch2.2.29_rev_1.134

openldapopenldapMatch2.3.27_2.20061018

openldapopenldapMatch2.3.28_2.20061022

openldapopenldapMatch2.3.28_20061022

openldapopenldapMatch2.3.28_e1.0.0

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=440632

lists.apple.com/archives/security-announce/2009/Nov/msg00000.html

secunia.com/advisories/27424

secunia.com/advisories/27587

secunia.com/advisories/27596

secunia.com/advisories/27683

secunia.com/advisories/27756

secunia.com/advisories/27868

secunia.com/advisories/29461

secunia.com/advisories/29682

security.gentoo.org/glsa/glsa-200803-28.xml

support.apple.com/kb/HT3937

www.debian.org/security/2008/dsa-1541

www.mandriva.com/security/advisories?name=MDKSA-2007:215

www.novell.com/linux/security/advisories/2007_24_sr.html

www.openldap.org/its/index.cgi/Software%20Bugs?id=5119

www.openldap.org/lists/openldap-announce/200710/msg00001.html

www.redhat.com/archives/fedora-package-announce/2007-November/msg00460.html

www.redhat.com/support/errata/RHSA-2007-1037.html

www.redhat.com/support/errata/RHSA-2007-1038.html

www.securityfocus.com/bid/26245

www.securitytracker.com/id?1018924

www.ubuntu.com/usn/usn-551-1

www.vupen.com/english/advisories/2007/3645

www.vupen.com/english/advisories/2009/3184

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10183

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

High

0.045 Low

EPSS

Percentile

92.5%

JSON

Related for NVD:CVE-2007-5707

openvas19 centos1 prion1 oraclelinux1 nessus17 ubuntucve1 cve1 cvelist1 redhat2 freebsd1 ubuntu1 fedora2 gentoo1 osv1 debian1