CVE-2006-5779: High severity openldap OpenLDAP vulnerability
Published Nov 7, 2006
·Updated
OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.
Affected Software
132 affected components
openldap OpenLDAP=2.0.2
openldap OpenLDAP=2.1.15
openldap OpenLDAP=2.1.10
openldap OpenLDAP=2.2.4
openldap OpenLDAP=2.2.22
openldap OpenLDAP=2.1.29
openldap OpenLDAP=2.2.18
openldap OpenLDAP=2.1.9
openldap OpenLDAP=1.2.6
openldap OpenLDAP=1.1.2
openldap OpenLDAP=2.0.22
openldap OpenLDAP=2.0.9
openldap OpenLDAP=2.2.0
openldap OpenLDAP=2.1.19
openldap OpenLDAP=1.0
openldap OpenLDAP=1.2.7
openldap OpenLDAP=2.2.12
openldap OpenLDAP=2.2.20
openldap OpenLDAP=2.0.15
openldap OpenLDAP=2.2.13
openldap OpenLDAP=2.1.30
openldap OpenLDAP=2.0.26
openldap OpenLDAP=2.1.5
openldap OpenLDAP=2.1.14
openldap OpenLDAP=2.1.21
openldap OpenLDAP=1.0.2
openldap OpenLDAP=2.1.24
openldap OpenLDAP=2.3.17
openldap OpenLDAP=2.1.20
openldap OpenLDAP=2.0.14
openldap OpenLDAP=2.0.7
openldap OpenLDAP=1.2.11
openldap OpenLDAP=1.1.0
openldap OpenLDAP=2.0.13
openldap OpenLDAP=2.0.27
openldap OpenLDAP=2.3.12
openldap OpenLDAP=2.2.9
openldap OpenLDAP=2.1.26
openldap OpenLDAP=2.2.27
openldap OpenLDAP=2.3.27
openldap OpenLDAP=2.3.20
openldap OpenLDAP=2.1.17
openldap OpenLDAP=2.3.13
openldap OpenLDAP=2.1.2
openldap OpenLDAP=2.2.14
openldap OpenLDAP=2.1.6
openldap OpenLDAP=2.0.3
openldap OpenLDAP=2.3.14
openldap OpenLDAP=2.2.10
openldap OpenLDAP=2.2.7
openldap OpenLDAP=1.2.12
openldap OpenLDAP=2.0.25
openldap OpenLDAP<=2.3.28
openldap OpenLDAP=2.1.12
openldap OpenLDAP=2.0.12
openldap OpenLDAP=2.2.24
openldap OpenLDAP=2.3.10
openldap OpenLDAP=2.3.26
openldap OpenLDAP=1.2.1
openldap OpenLDAP=1.1.4
openldap OpenLDAP=1.1
openldap OpenLDAP=1.2.10
openldap OpenLDAP=2.0.24
openldap OpenLDAP=1.1.1
openldap OpenLDAP=2.0.20
openldap OpenLDAP=1.2.2
openldap OpenLDAP=1.0.1
openldap OpenLDAP=1.2.4
openldap OpenLDAP=2.0.4
openldap OpenLDAP=2.0.16
openldap OpenLDAP=2.2.5
openldap OpenLDAP=2.3.18
openldap OpenLDAP=2.2.6
openldap OpenLDAP=2.1.25
openldap OpenLDAP=2.3.24
openldap OpenLDAP=1.2.8
openldap OpenLDAP=2.1.27
openldap OpenLDAP=2.3.21
openldap OpenLDAP=1.2.9
openldap OpenLDAP=2.0.19
openldap OpenLDAP=2.3.15
openldap OpenLDAP=2.2.21
openldap OpenLDAP=2.1.8
openldap OpenLDAP=2.2.1
openldap OpenLDAP=1.2.13
openldap OpenLDAP=2.0.10
openldap OpenLDAP=2.1.7
openldap OpenLDAP=2.0.1
openldap OpenLDAP=2.2.15
openldap OpenLDAP=2.0
openldap OpenLDAP=2.0.23
openldap OpenLDAP=1.2.5
openldap OpenLDAP=2.2.11
openldap OpenLDAP=1.0.3
openldap OpenLDAP=2.2.17
openldap OpenLDAP=2.1.3
openldap OpenLDAP=2.3.25
openldap OpenLDAP=2.2.23
openldap OpenLDAP=2.3.19
openldap OpenLDAP=2.1.11
openldap OpenLDAP=2.0.8
openldap OpenLDAP=2.1.13
openldap OpenLDAP=2.2.25
openldap OpenLDAP=2.1.23
openldap OpenLDAP=2.0.18
openldap OpenLDAP=1.2
openldap OpenLDAP=2.1.16
openldap OpenLDAP=2.1.28
openldap OpenLDAP=2.1.22
openldap OpenLDAP=2.0.5
openldap OpenLDAP=2.3.11
openldap OpenLDAP=2.2.8
openldap OpenLDAP=2.3.23
openldap OpenLDAP=1.1.3
openldap OpenLDAP=2.0.11
openldap OpenLDAP=2.2.26
openldap OpenLDAP=2.0.6
openldap OpenLDAP=2.3.16
openldap OpenLDAP=2.3.22
openldap OpenLDAP=2.0.17
openldap OpenLDAP=2.2.19
openldap OpenLDAP=2.1.4
openldap OpenLDAP=1.2.3
openldap OpenLDAP=2.1.18
openldap OpenLDAP=2.2.16
openldap OpenLDAP=2.0.0
openldap OpenLDAP=2.0.21
openldap OpenLDAP=1.2.0
openldap OpenLDAP<2.3.29
Canonical Ubuntu Linux=5.10
Canonical Ubuntu Linux=6.06
Canonical Ubuntu Linux=6.10
Event History
Nov 7, 2006
CVE Published
06:07 PM
Data Sourced
via NVD·06:07 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5779?
CVE-2006-5779 has been designated as a high severity vulnerability due to its potential to cause denial of service by crashing the OpenLDAP daemon.
2
How do I fix CVE-2006-5779?
To fix CVE-2006-5779, update OpenLDAP to version 2.3.29 or later, which addresses the vulnerability.
3
Which versions of OpenLDAP are affected by CVE-2006-5779?
OpenLDAP versions prior to 2.3.29, including versions 2.3.28 and earlier, are affected by CVE-2006-5779.
4
Can CVE-2006-5779 affect all installations of OpenLDAP?
CVE-2006-5779 primarily affects installations of OpenLDAP that can accept LDAP BIND requests with long authcid names.
5
Is CVE-2006-5779 specific to any operating systems?
While CVE-2006-5779 affects OpenLDAP, it may also impact specific operating systems like certain versions of Ubuntu running vulnerable OpenLDAP versions.