CVE-2014-9713: Medium severity openldap OpenLDAP vulnerability
Published Sep 13, 2014
·Updated
The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.
Affected Software
20 affected componentsFixes available
debian/openldap<=2.4.31-1+nmu2, <=2.4.23-3
2.4.40-22.4.31-22.4.23-7.3+deb6u1
debian/openldap
2.4.57+dfsg-3+deb11u12.5.13+dfsg-52.5.18+dfsg-2
openldap OpenLDAP=2.4.23
openldap OpenLDAP=2.4.24
openldap OpenLDAP=2.4.25
openldap OpenLDAP=2.4.26
openldap OpenLDAP=2.4.27
openldap OpenLDAP=2.4.28
openldap OpenLDAP=2.4.29
openldap OpenLDAP=2.4.30
openldap OpenLDAP=2.4.31
openldap OpenLDAP=2.4.32
openldap OpenLDAP=2.4.33
openldap OpenLDAP=2.4.34
openldap OpenLDAP=2.4.35
openldap OpenLDAP=2.4.36
openldap OpenLDAP=2.4.37
openldap OpenLDAP=2.4.38
openldap OpenLDAP=2.4.39
Debian Debian Linux=7.0
Event History
Apr 1, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
Can CVE-2014-9713 lead to unauthorized access?
Yes, CVE-2014-9713 can potentially enable unauthorized users to modify user attributes and permissions.