CVE-2008-0658: openldap Resource Management Errors

EPSS trend

Probability

3.05%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

0.00 pp

From 3.05% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.05%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (openldap.org)
Maturity: unknown

References

28 links

lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDVSA-2008:058Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/29461Third Party AdvisoryX Refsource SECUNIA
www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff?r1=1.197&r2=1.198&f=hX Refsource CONFIRMExploit
secunia.com/advisories/29225Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/Advisories:rPSA-2008-0059X Refsource CONFIRM
secunia.com/advisories/29682Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/wiki/Advisories:rPSA-2008-0059X Refsource CONFIRM
secunia.com/advisories/29256Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/488242/100/200/threadedMailing ListX Refsource BUGTRAQ

Show all 28 references

security.gentoo.org/glsa/glsa-200803-28.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/29068Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-584-1Vendor AdvisoryX Refsource UBUNTU
www.redhat.com/support/errata/RHSA-2008-0110.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9470VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/28953Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28914Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2008/dsa-1541Vendor AdvisoryX Refsource DEBIAN
exchange.xforce.ibmcloud.com/vulnerabilities/40479VDB EntryX Refsource XF
www.openldap.org/its/index.cgi/Software%20Bugs?id=5358X Refsource CONFIRM
www.vupen.com/english/advisories/2009/3184VDB EntryX Refsource VUPEN
secunia.com/advisories/28926Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/27778VDB EntryX Refsource BID
www.vupen.com/english/advisories/2008/0536/referencesVDB EntryX Refsource VUPEN
lists.apple.com/archives/security-announce/2009/Nov/msg00000.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/29957Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT3937X Refsource CONFIRM
www.securitytracker.com/id?1019481VDB EntryX Refsource SECTRACK

Related vulnerabilities

CVE-2013-4449debianopenldap+1310.91%12y ago05-02-2014 18:00The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while it is being used by rwm_op_search.CVE-2008-2952debianopenldap+913.17%18y ago01-07-2008 21:00liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.CVE-2012-2668openldapopenldap+63.95%14y ago17-06-2012 01:00libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.CVE-2012-1164debianopenldap+73.58%14y ago29-06-2012 19:00slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned.CVE-2011-1025debianopenldap+13.87%15y ago20-03-2011 01:00bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.CVE-2011-1024debianopenldap+92.59%15y ago20-03-2011 01:00chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

All vulnerabilities inopenldap

CVE-2008-0658: openldap Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References