CVE-2006-4600
Fixed in a distro release EPSS 3%
slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).
Products: openldap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | openldap | 0:2.0.27-23 |
| Red Hat Enterprise Linux 3 | openldap-clients | 0:2.0.27-23 |
| Red Hat Enterprise Linux 3 | openldap-debuginfo | 0:2.0.27-23 |
| Red Hat Enterprise Linux 3 | openldap-devel | 0:2.0.27-23 |
| Red Hat Enterprise Linux 3 | openldap-servers | 0:2.0.27-23 |
| Red Hat Enterprise Linux 4 | compat-openldap | 0:2.1.30-7.4E |
| Red Hat Enterprise Linux 4 | openldap | 0:2.2.13-7.4E |
| Red Hat Enterprise Linux 4 | openldap-clients | 0:2.2.13-7.4E |
| Red Hat Enterprise Linux 4 | openldap-debuginfo | 0:2.2.13-7.4E |
| Red Hat Enterprise Linux 4 | openldap-devel | 0:2.2.13-7.4E |
| Red Hat Enterprise Linux 4 | openldap-servers | 0:2.2.13-7.4E |
| Red Hat Enterprise Linux 4 | openldap-servers-sql | 0:2.2.13-7.4E |