CVE-2006-0452: Medium severity redhat Fedora Core vulnerability

Published Feb 14, 2006
·
Updated

dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via a ModDN operation with a DN that contains a large number of "," (comma) characters, which results in a large amount of recursion, as demonstrated using the ProtoVer LDAP test suite.

Affected Software

1 affected component
redhat Fedora Core=1.0

Event History

Feb 14, 2006
CVE Published
10:06 PM
Feb 15, 2006
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2006-0452?

CVE-2006-0452 is classified as a denial of service vulnerability, which can significantly impact system performance.

2

How do I fix CVE-2006-0452?

To fix CVE-2006-0452, upgrade to a later version of the Fedora Directory Server that addresses this vulnerability.

3

Who is affected by CVE-2006-0452?

CVE-2006-0452 affects users of Fedora Directory Server version 1.0.

4

What does CVE-2006-0452 exploit?

CVE-2006-0452 exploits the ModDN operation in LDAP by utilizing a Distinguished Name (DN) with excessive commas.

5

What can be done to mitigate CVE-2006-0452?

To mitigate CVE-2006-0452, avoid using ModDN operations with overly complex or large DNs containing many commas.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203