openldap Vulnerability Advisory Catalog

Total 58 security vulnerabilities recorded for openldap software and firmware.

← Back to All Vendors
CVE-2005-4442 UNKNOWN
Component: openldap

Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a mali...

📅 2005-12-21
CVSS 7.2 Dossier →
CVE-2004-1880 UNKNOWN
Component: openldap

Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption)....

📅 2004-12-31
CVSS 5.0 Dossier →
CVE-2004-0823 UNKNOWN
Component: openldap

OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes ...

📅 2004-09-07
CVSS 7.5 Dossier →
CVE-2003-1201 UNKNOWN
Component: openldap

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_S...

📅 2003-03-20
CVSS 5.0 Dossier →
CVE-2002-1508 UNKNOWN
Component: openldap

slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log fi...

📅 2003-02-19
CVSS 1.2 Dossier →
CVE-2002-1379 UNKNOWN
Component: openldap

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applica...

📅 2003-01-02
CVSS 7.5 Dossier →
CVE-2002-1378 UNKNOWN
Component: openldap

Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameter...

📅 2003-01-02
CVSS 7.5 Dossier →
CVE-2002-0045 UNKNOWN
Component: openldap

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without an...

📅 2002-01-31
CVSS 7.5 Dossier →
CVE-2000-0748 UNKNOWN
Component: openldap

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the bi...

📅 2000-10-20
CVSS 4.6 Dossier →
CVE-2000-0336 UNKNOWN
Component: openldap

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack....

📅 2000-04-21
CVSS 2.1 Dossier →
Page 3 of 3 (58 Total Records)