CVE-2006-2754: Buffer Overflow
Published Jun 1, 2006
·Updated
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.
Affected Software
12 affected components
openldap OpenLDAP=2.2.1
openldap OpenLDAP=2.2.11
openldap OpenLDAP=2.2.12
openldap OpenLDAP=2.2.13
openldap OpenLDAP=2.2.14
openldap OpenLDAP=2.2.15
openldap OpenLDAP=2.2.16
openldap OpenLDAP=2.2.17
openldap OpenLDAP=2.2.18
openldap OpenLDAP=2.2.19
openldap OpenLDAP=2.2.20
openldap OpenLDAP=2.2.21
Remediation
Patch Available
Patch Available
Event History
Jun 1, 2006
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2754?
CVE-2006-2754 has been classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2006-2754?
To fix CVE-2006-2754, upgrade OpenLDAP to version 2.3.22 or later.
3
What versions of OpenLDAP are affected by CVE-2006-2754?
CVE-2006-2754 affects OpenLDAP versions 2.2.1 through 2.2.21.
4
What type of vulnerability is CVE-2006-2754?
CVE-2006-2754 is a stack-based buffer overflow vulnerability.
5
Can CVE-2006-2754 be exploited remotely?
Yes, CVE-2006-2754 can be exploited remotely by sending a specially crafted long hostname.