CVEvulnerability

CVE-2002-0045

7.5 HIGH Published 2002-01-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-01-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.

Affected configurations

• openldap openldap (<= 2.0.19) • openldap openldap 2.0 • redhat linux 7.0 • redhat linux 7.1 • redhat linux 7.2

References