PT-2015-4361 · Openldap+2 · Openldap+2

Dietrich Clauss · Published 2015-03-30 · Updated 2016-12-22 · CVE-2014-9713

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions openldap package versions 2.4.23-3 through 2.4.39-1.1

Description The issue allows remote authenticated users to modify user permissions and attributes.

Recommendations For versions 2.4.23-3 through 2.4.39-1.1, update the slapd configuration to restrict user permission modifications.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2015-1819

CVE-2014-9713

DLA-203-1

DSA-3209-1

USN-2742-1

Affected Products

Alt Linux

Ubuntu

Openldap

References · 41

• https://bdu.fstec.ru/vul/2015-07066 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9713 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6908 · Security Note
• https://bdu.fstec.ru/vul/2015-07061 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3209-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09062 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-9713 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-9713 · Security Note
• https://bdu.fstec.ru/vul/2015-09064 · Security Note
• https://bdu.fstec.ru/vul/2015-09065 · Security Note
• https://bdu.fstec.ru/vul/2015-07068 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1819 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09060 · Security Note
• https://bdu.fstec.ru/vul/2015-09063 · Security Note