What is CVE-2006-6493?

CVE-2006-6493 is a vulnerability in Openldap. Published 2006-12-13.

Is CVE-2006-6493 known to be exploited?

6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Openldap

CVE-2006-6493

Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with the --enable-kbind (Kerberos KBIND) option, allows remote attackers to execute arbitrary code via an LDAP bind request using the LDAP_AUTH_KRBV41 authentication method and long credential data.

EPSS: 0.093 (94.8th percentile) — read the EPSS interpretation.

Affected products

Openldap — versions 1.0, 1.0.1, 1.0.2
N/a — versions n/a

Public proof-of-concept exploits

References

cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)

Frequently asked questions

What is CVE-2006-6493?: CVE-2006-6493 is a vulnerability in Openldap. Published 2006-12-13.
Is CVE-2006-6493 known to be exploited?: 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.