PT-2015-4361 · Openldap+2 · Openldap+2

CVE-2014-9713

Published

2015-03-30

Updated

2016-12-22

CVSS v2.0

4.0

Medium

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions openldap package versions 2.4.23-3 through 2.4.39-1.1

Description The issue allows remote authenticated users to modify user permissions and attributes.

Recommendations For versions 2.4.23-3 through 2.4.39-1.1, update the slapd configuration to restrict user permission modifications.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

ALT-PU-2015-1819

CVE-2014-9713

DLA-203-1

DSA-3209-1

USN-2742-1

Alt Linux

Ubuntu

Openldap