CVE-2014-9713
First published: Sat Sep 13 2014(Updated: )
The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.
Credit: security@debian.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openldap Openldap | =2.4.23 | |
| Openldap Openldap | =2.4.24 | |
| Openldap Openldap | =2.4.25 | |
| Openldap Openldap | =2.4.26 | |
| Openldap Openldap | =2.4.27 | |
| Openldap Openldap | =2.4.28 | |
| Openldap Openldap | =2.4.29 | |
| Openldap Openldap | =2.4.30 | |
| Openldap Openldap | =2.4.31 | |
| Openldap Openldap | =2.4.32 | |
| Openldap Openldap | =2.4.33 | |
| Openldap Openldap | =2.4.34 | |
| Openldap Openldap | =2.4.35 | |
| Openldap Openldap | =2.4.36 | |
| Openldap Openldap | =2.4.37 | |
| Openldap Openldap | =2.4.38 | |
| Openldap Openldap | =2.4.39 | |
| Debian Debian Linux | =7.0 | |
| debian/openldap | <=2.4.31-1+nmu2<=2.4.23-3 | 2.4.40-2 2.4.31-2 2.4.23-7.3+deb6u1 |
| debian/openldap | 2.4.57+dfsg-3+deb11u1 2.5.13+dfsg-5 2.5.18+dfsg-2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2015/dsa-3209
- http://www.openwall.com/lists/oss-security/2015/03/29/2
- http://www.securityfocus.com/bid/73217
- http://www.ubuntu.com/usn/USN-2742-1
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406
- http://anonscm.debian.org/cgit/pkg-openldap/openldap.git/diff/debian/slapd.templates?id=master&id2=2.4.39-1
- http://anonscm.debian.org/cgit/pkg-openldap/openldap.git/diff/debian/slapd.README.Debian?id=master&id2=2.4.39-1
- https://security-tracker.debian.org/tracker/CVE-2014-9713
- https://security-tracker.debian.org/tracker/CVE-2015-1545
- https://security-tracker.debian.org/tracker/CVE-2013-4449
- http://wiki.debian.org/LTS/Development
- https://anonscm.debian.org/viewvc/secure-testing/data/dla-needed.txt?view=markup
- http://www.freexian.com/services/debian-lts.html
- http://debian-handbook.info/get/
- https://security-tracker.debian.org/tracker/CVE-2012-1164
- collector/nvd-index
- collector/debian-bugs
- alias/CVE-2014-9713
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/references
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- vendor/openldap
- canonical/openldap openldap
- version/openldap openldap/2.4.23
- version/openldap openldap/2.4.24
- version/openldap openldap/2.4.25
- version/openldap openldap/2.4.26
- version/openldap openldap/2.4.27
- version/openldap openldap/2.4.28
- version/openldap openldap/2.4.29
- version/openldap openldap/2.4.30
- version/openldap openldap/2.4.31
- version/openldap openldap/2.4.32
- version/openldap openldap/2.4.33
- version/openldap openldap/2.4.34
- version/openldap openldap/2.4.35
- version/openldap openldap/2.4.36
- version/openldap openldap/2.4.37
- version/openldap openldap/2.4.38
- version/openldap openldap/2.4.39
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/7.0
- package-manager/debian