Vulnerabilities > CVE-2006-6493 - Unspecified vulnerability in Openldap
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.
Vulnerable Configurations
Statements
| contributor | Mark J Cox |
| lastmodified | 2006-12-19 |
| organization | Red Hat |
| statement | Not vulnerable. OpenLDAP as shipped with Red Hat Enterprise Linux 2.1, 3, and 4 does not support the LDAP_AUTH_KRBV41 authentication method. |
References
- http://secunia.com/advisories/23334
- http://secunia.com/advisories/23334
- http://securityreason.com/securityalert/2023
- http://securityreason.com/securityalert/2023
- http://www.phreedom.org/solar/exploits/openldap-kbind
- http://www.phreedom.org/solar/exploits/openldap-kbind
- http://www.securityfocus.com/archive/1/454181/30/0/threaded
- http://www.securityfocus.com/archive/1/454181/30/0/threaded
- http://www.vupen.com/english/advisories/2006/4964
- http://www.vupen.com/english/advisories/2006/4964