WID-SEC-W-2024-3166

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

OpenLDAP: Schwachstelle ermöglicht Manipulation von Daten

view advisory published 2015-11-19

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenLDAP ausnutzen, um Daten zu manipulieren.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2015-3276UShigh7.5—
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than int…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan