CVE-2006-6493: Buffer Overflow
Buffer overflow in the krbv4ldapauth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAPAUTHKRBV41 authentication method and long credential data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6493?
CVE-2006-6493 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2006-6493?
To fix CVE-2006-6493, update to a version of OpenLDAP later than 2.4.3 that does not use the --enable-kbind option.
Which versions of OpenLDAP are affected by CVE-2006-6493?
CVE-2006-6493 affects OpenLDAP versions 2.4.3 and earlier when compiled with the --enable-kbind option.
What type of attack does CVE-2006-6493 enable?
CVE-2006-6493 allows remote attackers to execute arbitrary code on affected OpenLDAP installations.
Is CVE-2006-6493 still a risk today?
If you are using an outdated version of OpenLDAP with the --enable-kbind option, CVE-2006-6493 remains a significant risk.