CVE-2006-4600: Low severity openldap openldap vulnerability
Published Sep 7, 2006
·Updated
slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).
Affected Software
5 affected components
openldap OpenLDAP=2.0.20
openldap OpenLDAP=2.0.21
openldap OpenLDAP=2.0.22
openldap OpenLDAP=2.0.23
openldap OpenLDAP=2.0.24
Remediation
Patch Available
Patch Available
Patch Available
Event History
Sep 7, 2006
CVE Published
12:04 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4600?
CVE-2006-4600 is considered a medium severity vulnerability due to the potential for arbitrary modifications by authenticated users.
2
How do I fix CVE-2006-4600?
To mitigate CVE-2006-4600, upgrade OpenLDAP to version 2.3.25 or later.
3
What systems are affected by CVE-2006-4600?
CVE-2006-4600 affects OpenLDAP versions 2.0.20 to 2.0.24.
4
What types of attacks can exploit CVE-2006-4600?
CVE-2006-4600 can be exploited by authenticated users who have selfwrite ACL privileges to modify Distinguished Names.
5
What are the consequences of exploiting CVE-2006-4600?
Exploitation of CVE-2006-4600 could lead to unauthorized modifications of directory entries, potentially compromising data integrity.