CVE-2007-6698: openldap Resource Management Errors

EPSS trend

Probability

2.04%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.04% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.04%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

25 links

lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDVSA-2008:058Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/29225Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1019480VDB EntryX Refsource SECTRACK
www.openldap.org/lists/openldap-bugs/200704/msg00067.htmlMailing ListX Refsource MLIST
secunia.com/advisories/28817Third Party AdvisoryX Refsource SECUNIAVendor Advisory
wiki.rpath.com/Advisories:rPSA-2008-0059X Refsource CONFIRM
secunia.com/advisories/29682Third Party AdvisoryX Refsource SECUNIAVendor Advisory
wiki.rpath.com/wiki/Advisories:rPSA-2008-0059X Refsource CONFIRM
secunia.com/advisories/29256Third Party AdvisoryX Refsource SECUNIA

Show all 25 references

www.securityfocus.com/archive/1/488242/100/200/threadedMailing ListX Refsource BUGTRAQ
bugzilla.redhat.com/show_bug.cgi?id=431203X Refsource CONFIRM
secunia.com/advisories/29068Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-584-1Vendor AdvisoryX Refsource UBUNTU
www.redhat.com/support/errata/RHSA-2008-0110.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28953Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2008/dsa-1541Vendor AdvisoryX Refsource DEBIAN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10748VDB EntrySignatureX Refsource OVAL
www.redhat.com/archives/fedora-package-announce/2008-February/msg00105.htmlVendor AdvisoryX Refsource FEDORA
www.openldap.org/lists/openldap-bugs/200704/msg00068.htmlMailing ListX Refsource MLIST
www.vupen.com/english/advisories/2009/3184VDB EntryX Refsource VUPENVendor Advisory
lists.apple.com/archives/security-announce/2009/Nov/msg00000.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/29957Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/26245VDB EntryX Refsource BID
support.apple.com/kb/HT3937X Refsource CONFIRM

Related vulnerabilities

CVE-2013-4449debianopenldap+1310.91%12y ago05-02-2014 18:00The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.CVE-2008-2952debianopenldap+913.17%18y ago01-07-2008 21:00liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.CVE-2008-0658openldapopenldap3.05%18y ago13-02-2008 20:00slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.CVE-2012-2668openldapopenldap+63.95%14y ago17-06-2012 01:00libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.CVE-2012-1164debianopenldap+73.58%14y ago29-06-2012 19:00slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.CVE-2011-1025debianopenldap+13.87%15y ago20-03-2011 01:00bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

All vulnerabilities inopenldap

CVE-2007-6698: openldap Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References