CVE

Id
4439  
CVE No.
CVE-2002-0045  
Status
Entry  
Description
slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
21447 4439 CVE-2002-0045 CONFIRM:http://www.openldap.org/lists/openldap-announce/200201/msg00002.html  View
21448 4439 CVE-2002-0045 CALDERA:CSSA-2002-001.0  View
21449 4439 CVE-2002-0045 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-001.0.txt  View
21450 4439 CVE-2002-0045 CONECTIVA:CLA-2002:459  View
21451 4439 CVE-2002-0045 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000459  View
21452 4439 CVE-2002-0045 HP:HPSBTL0201-020  View
21453 4439 CVE-2002-0045 URL:http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-020  View
21454 4439 CVE-2002-0045 MANDRAKE:MDKSA-2002:013  View
21455 4439 CVE-2002-0045 URL:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:013  View
21456 4439 CVE-2002-0045 REDHAT:RHSA-2002:014  View
21457 4439 CVE-2002-0045 URL:http://www.redhat.com/support/errata/RHSA-2002-014.html  View
21458 4439 CVE-2002-0045 BID:3945  View
21459 4439 CVE-2002-0045 URL:http://www.securityfocus.com/bid/3945  View
21460 4439 CVE-2002-0045 OSVDB:5395  View
21461 4439 CVE-2002-0045 URL:http://www.osvdb.org/5395  View
21462 4439 CVE-2002-0045 XF:openldap-slapd-delete-attributes(7978)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63688 JVNDB-2002-000015 OpenLDAP におけるアクセスコントロールリストを不正に差し替えることが可能な脆弱性 OpenLDAP において、 ACL(Access Control List) のパーミッションが適切に設定されていないため、ローカルユーザが ACL ファイルを空の ACL ファイルと差し替えることが可能となる脆弱性が存在します。 CVE-2002-0045 4439 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000015.html  View