critical10.0Public exploit code
CVE-2007-4566
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SIDVault 2.0e - Windows Universal Buffer Overflow (SEH)2009-09-09 · remote · windows · Verified
- SIDVault 2.0e - Windows Remote Buffer Overflow (Metasploit)2009-09-04 · remote · windows · Verified
- SIDVault 2.0e - Windows Remote Buffer Overflow2009-09-03 · remote · windows · Verified
- SIDVault LDAP Server - Remote Buffer Overflow2007-08-25 · remote · linux · Verified
Impact
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alpha Centauri Software | Sidvault Ldap Server | through 2.0e |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html
- http://secunia.com/advisories/26613
- http://securityreason.com/securityalert/3061
- http://www.securityfocus.com/archive/1/477821/100/0/threaded
- http://www.securityfocus.com/bid/25460
- http://www.securitytracker.com/id?1018612
- http://www.vupen.com/english/advisories/2007/2976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html
- http://secunia.com/advisories/26613
- http://securityreason.com/securityalert/3061
- http://www.securityfocus.com/archive/1/477821/100/0/threaded
- http://www.securityfocus.com/bid/25460
- http://www.securitytracker.com/id?1018612
- http://www.vupen.com/english/advisories/2007/2976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272