CVEvulnerability
CVE-2007-4566
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-08-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.
Affected configurations
• alpha centauri software sidvault ldap server (<= 2.0e)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html lists.grok.org.uk
- http://secunia.com/advisories/26613 Patch, Vendor Advisory
- http://securityreason.com/securityalert/3061 securityreason.com
- http://www.securityfocus.com/archive/1/477821/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25460 www.securityfocus.com
- http://www.securitytracker.com/id?1018612 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2976 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html lists.grok.org.uk
- http://secunia.com/advisories/26613 Patch, Vendor Advisory
- http://securityreason.com/securityalert/3061 securityreason.com
- http://www.securityfocus.com/archive/1/477821/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25460 www.securityfocus.com
- http://www.securitytracker.com/id?1018612 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2976 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272 exchange.xforce.ibmcloud.com