CVE-2004-1880: Medium severity openldap OpenLDAP vulnerability
Published Dec 31, 2004
·Updated
Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption).
Affected Software
62 affected components
openldap OpenLDAP=1.0
openldap OpenLDAP=1.0.1
openldap OpenLDAP=1.0.2
openldap OpenLDAP=1.0.3
openldap OpenLDAP=1.1.0
openldap OpenLDAP=1.1.1
openldap OpenLDAP=1.1.2
openldap OpenLDAP=1.1.3
openldap OpenLDAP=1.1.4
openldap OpenLDAP=1.2.0
openldap OpenLDAP=1.2.1
openldap OpenLDAP=1.2.2
openldap OpenLDAP=1.2.3
openldap OpenLDAP=1.2.4
openldap OpenLDAP=1.2.5
openldap OpenLDAP=1.2.6
openldap OpenLDAP=1.2.7
openldap OpenLDAP=1.2.8
openldap OpenLDAP=1.2.9
openldap OpenLDAP=1.2.10
openldap OpenLDAP=1.2.11
openldap OpenLDAP=1.2.12
openldap OpenLDAP=1.2.13
openldap OpenLDAP=2.0.0
openldap OpenLDAP=2.0.1
openldap OpenLDAP=2.0.2
openldap OpenLDAP=2.0.3
openldap OpenLDAP=2.0.4
openldap OpenLDAP=2.0.5
openldap OpenLDAP=2.0.6
openldap OpenLDAP=2.0.7
openldap OpenLDAP=2.0.8
openldap OpenLDAP=2.0.9
openldap OpenLDAP=2.0.10
openldap OpenLDAP=2.0.11
openldap OpenLDAP=2.0.12
openldap OpenLDAP=2.0.13
openldap OpenLDAP=2.0.14
openldap OpenLDAP=2.0.15
openldap OpenLDAP=2.0.16
openldap OpenLDAP=2.0.17
openldap OpenLDAP=2.0.18
openldap OpenLDAP=2.0.19
openldap OpenLDAP=2.0.20
openldap OpenLDAP=2.0.21
openldap OpenLDAP=2.0.22
openldap OpenLDAP=2.0.23
openldap OpenLDAP=2.0.24
openldap OpenLDAP=2.0.25
openldap OpenLDAP=2.0.26
openldap OpenLDAP=2.0.27
openldap OpenLDAP=2.1.2
openldap OpenLDAP=2.1.3
openldap OpenLDAP=2.1.4
openldap OpenLDAP=2.1.5
openldap OpenLDAP=2.1.6
openldap OpenLDAP=2.1.7
openldap OpenLDAP=2.1.8
openldap OpenLDAP=2.1.9
openldap OpenLDAP=2.1.10
openldap OpenLDAP=2.1.11
openldap OpenLDAP=2.1.12
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1880?
CVE-2004-1880 has a high severity due to its potential to cause denial of service by exhausting memory resources.
2
How do I fix CVE-2004-1880?
To fix CVE-2004-1880, you should upgrade OpenLDAP to version 2.1.13 or later.
3
Which versions of OpenLDAP are affected by CVE-2004-1880?
CVE-2004-1880 affects OpenLDAP versions up to 2.1.12 and earlier.
4
What type of vulnerability is CVE-2004-1880?
CVE-2004-1880 is a memory leak vulnerability that can lead to denial of service.
5
Can CVE-2004-1880 be exploited remotely?
Yes, CVE-2004-1880 can be exploited remotely by attackers to consume memory on the affected server.