CVE-2011-1025

Description

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

7.28

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2011:0347) Moderate: openldap security update compat-openldap-2.4.19_2.3.43-15.el6_0.2.i686.rpm	Linux
(RHSA-2011:0347) Moderate: openldap security update compat-openldap-2.4.19_2.3.43-15.el6_0.2.x86_64.rpm	Linux
Improper Authentication Vulnerability (CVE-2011-1025)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234