CVE-2002-0045

published 2002-01-31

CVE-2002-0045: slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
openldap	openldap	<= 2.0.19	—
openldap	openldap	—	—
redhat	linux	—	—
redhat	linux	—	—
redhat	linux	—	—