2.2.0

DATE	CVE	VULNERABILITY TITLE	RISK
2007-10-30	CVE-2007-5708	Resource Management Errors vulnerability in Openldap slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates memory using a malloc variant instead of calloc, which prevents an array from being initialized properly and might allow attackers to cause a denial of service (segmentation fault) via unknown vectors that prevent the array from being null terminated. network openldap CWE-399	7.1
2006-12-13	CVE-2006-6493	Remote Security vulnerability in OpenLDAP Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data. network high complexity openldap	5.1