CVE-2007-4566
high · 10Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.
10
CVSS
15.3%
EPSS (exploit prob.)
97th
EPSS percentile
2007-08-28
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| alpha_centauri_software | sidvault_ldap_server | <= 2.0e |
Check a specific version with /api/v1/cve/match.
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html
- http://secunia.com/advisories/26613
- http://securityreason.com/securityalert/3061
- http://www.securityfocus.com/archive/1/477821/100/0/threaded
- http://www.securityfocus.com/bid/25460
- http://www.securitytracker.com/id?1018612
- http://www.vupen.com/english/advisories/2007/2976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html
- http://secunia.com/advisories/26613
- http://securityreason.com/securityalert/3061
- http://www.securityfocus.com/archive/1/477821/100/0/threaded
- http://www.securityfocus.com/bid/25460
- http://www.securitytracker.com/id?1018612
- http://www.vupen.com/english/advisories/2007/2976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-4566