Security Advisory

CVE-2011-1025

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-03-20 01:00:00

Last updated 2024-08-06 22:14:27

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

← Browse all CVEs View on cve.org ↗