Lucene search
HistoryApr 01, 2015 - 2:59 p.m.
CVE-2014-9713
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.0%
The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user’s permissions and other user attributes via unspecified vectors.
Affected configurations
Node
openldapopenldapMatch2.4.23
ORopenldapopenldapMatch2.4.24
ORopenldapopenldapMatch2.4.25
ORopenldapopenldapMatch2.4.26
ORopenldapopenldapMatch2.4.27
ORopenldapopenldapMatch2.4.28
ORopenldapopenldapMatch2.4.29
ORopenldapopenldapMatch2.4.30
ORopenldapopenldapMatch2.4.31
ORopenldapopenldapMatch2.4.32
ORopenldapopenldapMatch2.4.33
ORopenldapopenldapMatch2.4.34
ORopenldapopenldapMatch2.4.35
ORopenldapopenldapMatch2.4.36
ORopenldapopenldapMatch2.4.37
ORopenldapopenldapMatch2.4.38
ORopenldapopenldapMatch2.4.39
Node
debiandebian_linuxMatch7.0
Related
cve
cve
CVE-2014-9713
2015-04-01 14:59:00
debiancve
debiancve
CVE-2014-9713
2015-04-01 14:59:00
prion
prion
Design/Logic Flaw
2015-04-01 14:59:00
ubuntucve
ubuntucve
CVE-2014-9713
2015-04-01 00:00:00
cvelist
cvelist
CVE-2014-9713
2015-04-01 14:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2742-1)
2015-09-17 00:00:00
Debian: Security Advisory (DSA-3209-1)
2015-03-29 00:00:00
Debian Security Advisory DSA 3209-1 (openldap - security update)
2015-03-30 00:00:00
ubuntu
ubuntu
OpenLDAP vulnerabilities
2015-09-16 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : OpenLDAP vulnerabilities (USN-2742-1)
2015-09-17 00:00:00
Debian DSA-3209-1 : openldap - security update
2015-03-31 00:00:00
Debian DLA-203-1 : openldap security update
2015-04-20 00:00:00
securityvulns
securityvulns
OpenLDAP multiple security vulnerabilities
2015-04-13 00:00:00
[SECURITY] [DSA 3209-1] openldap security update
2015-04-13 00:00:00
osv
osv
openldap - security update
2015-03-30 00:00:00
openldap - security update
2015-04-18 00:00:00
debian
debian
[SECURITY] [DSA 3209-1] openldap security update
2015-03-30 21:04:31
[SECURITY] [DLA 203-1] openldap security update
2015-04-18 15:26:21
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.0%
Related for NVD:CVE-2014-9713