CVE-2006-6493

Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind…

published December 13, 2006

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09326 · 95.4th percentile
Published
2006-12-13T00:00Z
EPSS history
Timeline
  • 13 DEC 00:00Z
    Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind…
    cvelistv5