CVE-2007-4566 Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as d...
HighCVSS 10.0
EPSS 15.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alpha centauri software sidvault ldap server | <= 2.0e | No fix listed |
References
- 20070826 SIDVault LDAP Server Remote Buffer Overflow mailing-list
- 26613 patch third-party-advisory vendor-advisory
- 3061 third-party-advisory
- 20070826 SIDVault LDAP Server Remote Buffer Overflow mailing-list
- 25460 vdb-entry
- 1018612 vdb-entry
- ADV-2007-2976 vdb-entry
- sidvault-ldap-bo(36272) vdb-entry