CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1025

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.044

EPSS Ranking 90.2%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2011-1025

Openldap » Openldap » Version: 2.4.10

cpe:2.3:a:openldap:openldap:2.4.10
Openldap » Openldap » Version: 2.4.11

cpe:2.3:a:openldap:openldap:2.4.11
Openldap » Openldap » Version: 2.4.12

cpe:2.3:a:openldap:openldap:2.4.12
Openldap » Openldap » Version: 2.4.13

cpe:2.3:a:openldap:openldap:2.4.13
Openldap » Openldap » Version: 2.4.14

cpe:2.3:a:openldap:openldap:2.4.14
Openldap » Openldap » Version: 2.4.15

cpe:2.3:a:openldap:openldap:2.4.15
Openldap » Openldap » Version: 2.4.16

cpe:2.3:a:openldap:openldap:2.4.16
Openldap » Openldap » Version: 2.4.17

cpe:2.3:a:openldap:openldap:2.4.17
Openldap » Openldap » Version: 2.4.18

cpe:2.3:a:openldap:openldap:2.4.18
Openldap » Openldap » Version: 2.4.19

cpe:2.3:a:openldap:openldap:2.4.19
Openldap » Openldap » Version: 2.4.20

cpe:2.3:a:openldap:openldap:2.4.20
Openldap » Openldap » Version: 2.4.21

cpe:2.3:a:openldap:openldap:2.4.21
Openldap » Openldap » Version: 2.4.22

cpe:2.3:a:openldap:openldap:2.4.22
Openldap » Openldap » Version: 2.4.23

cpe:2.3:a:openldap:openldap:2.4.23
Openldap » Openldap » Version: 2.4.6

cpe:2.3:a:openldap:openldap:2.4.6
Openldap » Openldap » Version: 2.4.7

cpe:2.3:a:openldap:openldap:2.4.7
Openldap » Openldap » Version: 2.4.8

cpe:2.3:a:openldap:openldap:2.4.8
Openldap » Openldap » Version: 2.4.9

cpe:2.3:a:openldap:openldap:2.4.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1025

Products

Pricing

Contact Us