NVD

Id
63233  
Name
CVE-2006-4600  
Description
slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).  
Reject
 
CVSS Version
2  
CVSS Score
2.3  
Severity
Low  
CVSS Base Score
2.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-06  
Modified Date
2011-03-07  
Seq
2006-4600  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329455 63233 CVE-2006-4600 20070602-01-P  View
329456 63233 CVE-2006-4600 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player  View
329457 63233 CVE-2006-4600 oval:org.mitre.oval:def:9618  View
329458 63233 CVE-2006-4600 GLSA-200711-23  View
329459 63233 CVE-2006-4600 1016783  View
329460 63233 CVE-2006-4600 http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm  View
329461 63233 CVE-2006-4600 MDKSA-2006:171  View
329462 63233 CVE-2006-4600 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587  View
329463 63233 CVE-2006-4600 [openldap-announce] 20060801 OpenLDAP 2.3.25 available  View
329464 63233 CVE-2006-4600 http://www.openldap.org/software/release/changes.html  View
329465 63233 CVE-2006-4600 RHSA-2007:0310  View
329466 63233 CVE-2006-4600 RHSA-2007:0430  View
329467 63233 CVE-2006-4600 20060929 rPSA-2006-0176-1 openldap openldap-clients openldap-servers  View
329468 63233 CVE-2006-4600 19832  View
329469 63233 CVE-2006-4600 2006-0055  View
329470 63233 CVE-2006-4600 ADV-2007-2186  View
329471 63233 CVE-2006-4600 ADV-2007-3229  View
329472 63233 CVE-2006-4600 openldap-selfwrite-security-bypass(28772)  View
329473 63233 CVE-2006-4600 https://issues.rpath.com/browse/RPL-667  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58686 JVNDB-2006-000951 OpenLDAP における slapd でのアクセスコントロールの不備により DN が変更される問題 OpenLDAP の slapd には、selfwrite アクセスコントロールの処理に不備が存在するために、任意の Distinguished Names (DN) を変更されてしまう問題があります。 CVE-2006-4600 20702 CVE-2006-4600 63233 2.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000951.html 2006-09-06 2007-06-22 View