Lucene search
Ubuntu.comUB:CVE-2011-1025HistoryMar 19, 2011 - 12:00 a.m.
CVE-2011-1025
2011-03-1900:00:00
ubuntu.com
ubuntu.com
10
0.018 Low
EPSS
Percentile
88.2%
bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require
authentication for the root Distinguished Name (DN), which allows remote
attackers to bypass intended access restrictions via an arbitrary password.
Bugs
- <https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/742104>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617606>
Notes
| Author | Note |
|---|---|
| jdstrand | code not compiled (requires --enable-ndb) |
Related
cve
cve
CVE-2011-1025
2011-03-20 02:00:03
cvelist
cvelist
CVE-2011-1025
2011-03-20 01:00:00
prion
prion
Authentication flaw
2011-03-20 02:00:00
debiancve
debiancve
CVE-2011-1025
2011-03-20 02:00:03
nessus
nessus
Oracle Linux 5 : openldap (ELSA-2011-0346)
2013-07-12 00:00:00
Oracle Linux 6 : openldap (ELSA-2011-0347)
2013-07-12 00:00:00
Fedora 15 : openldap-2.4.24-2.fc15 (2011-3612)
2011-04-22 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2011-0347)
2015-10-06 00:00:00
RedHat Update for openldap RHSA-2011:0347-01
2012-06-06 00:00:00
RedHat Update for openldap RHSA-2011:0347-01
2012-06-06 00:00:00
oraclelinux
oraclelinux
openldap security update
2011-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: openldap-2.4.23-10.fc14
2011-09-25 03:47:40
[SECURITY] Fedora 15 Update: openldap-2.4.24-2.fc15
2011-04-21 05:33:29
ubuntu
ubuntu
OpenLDAP vulnerabilities
2011-03-31 00:00:00
redhat
redhat
(RHSA-2011:0347) Moderate: openldap security update
2011-03-10 00:00:00
gentoo
gentoo
OpenLDAP: Multiple vulnerabilities
2014-06-30 00:00:00