CVE-2008-0658

MEDIUM 4.0CVE-2008-0658 · Published 13/02/2008 · updated 16/06/2026

In short

CVE-2008-0658 is a MEDIUM (CVSS 4.0) vulnerability affecting openldap (openldap).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openldap openldap	`= 2.3.39`	No fix yet

Description

slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.

References

lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
secunia.com/advisories/28914 · Vendor Advisory
secunia.com/advisories/28926 · Vendor Advisory
secunia.com/advisories/28953 · Vendor Advisory
secunia.com/advisories/29068 · Vendor Advisory
secunia.com/advisories/29225
secunia.com/advisories/29256
secunia.com/advisories/29461
secunia.com/advisories/29682
secunia.com/advisories/29957
security.gentoo.org/glsa/glsa-200803-28.xml
support.apple.com/kb/HT3937
wiki.rpath.com/Advisories:rPSA-2008-0059
wiki.rpath.com/wiki/Advisories:rPSA-2008-0059

More vulnerabilities in openldap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free