CVE-2006-6493 - CVE Reference - Advisories

CVE Reference: CVE-2006-6493

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-6493

Description: Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.

CVE Status: Candidate

References: SREASON http://securityreason.com/securityalert/2023 SAID Secunia Advisory: SA23334 MISC http://www.phreedom.org/solar/exploits/openldap-kbind BUGTRAQ http://www.securityfocus.com/archive/1/454181/30/0/threaded

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	OpenOffice "rtl_allocateMe mory()" Truncation Vulnerability

2.	JustSystems Ichitaro Products Unspecified Code Execution Vulnerability

3.	Red Hat update for openoffice.org

4.	Red Hat Directory Server Denial of Service Vulnerabilities

5.	Red Hat update for tomcat

6.	Mono Sys.Web HTTP Header Injection Vulnerability

7.	Red Hat Directory Server Multiple Vulnerabilities

8.	HP-UX update for Apache

9.	Quick Poll "id" SQL Injection Vulnerability

10.	Citadel "migrate_aliase s.sh" Insecure Temporary Files