CVEvulnerability

CVE-2006-6493

5.1 MEDIUM Published 2006-12-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-12-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.

Affected configurations

• openldap openldap (<= 2.4.3) • openldap openldap 1.0 • openldap openldap 1.0.1 • openldap openldap 1.0.2 • openldap openldap 1.0.3 • openldap openldap 1.1 • openldap openldap 1.1.0 • openldap openldap 1.1.1 • openldap openldap 1.1.2 • openldap openldap 1.1.3 • openldap openldap 1.1.4 • openldap openldap 1.2 • openldap openldap 1.2.0 • openldap openldap 1.2.1 • openldap openldap 1.2.2 • openldap openldap 1.2.3 • openldap openldap 1.2.4 • openldap openldap 1.2.5 • openldap openldap 1.2.6 • openldap openldap 1.2.7 • openldap openldap 1.2.8 • openldap openldap 1.2.9 • openldap openldap 1.2.10 • openldap openldap 1.2.11 • openldap openldap 1.2.12 • openldap openldap 1.2.13 • openldap openldap 2.0 • openldap openldap 2.0.0 • openldap openldap 2.0.1 • openldap openldap 2.0.2 • openldap openldap 2.0.3 • openldap openldap 2.0.4 • openldap openldap 2.0.5 • openldap openldap 2.0.6 • openldap openldap 2.0.7 • openldap openldap 2.0.8 • openldap openldap 2.0.9 • openldap openldap 2.0.10 • openldap openldap 2.0.11 • openldap openldap 2.0.11 9 • openldap openldap 2.0.11 11 • openldap openldap 2.0.11 11s • openldap openldap 2.0.12 • openldap openldap 2.0.13 • openldap openldap 2.0.14 • openldap openldap 2.0.15 • openldap openldap 2.0.16 • openldap openldap 2.0.17 • openldap openldap 2.0.18 • openldap openldap 2.0.19 • openldap openldap 2.0.20 • openldap openldap 2.0.21 • openldap openldap 2.0.22 • openldap openldap 2.0.23 • openldap openldap 2.0.24 • openldap openldap 2.0.25 • openldap openldap 2.0.26 • openldap openldap 2.0.27 • openldap openldap 2.1.2 • openldap openldap 2.1.3 … and 59 more

References