Vulnerability Details : CVE-2004-1880
Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption).
Vulnerability category: Denial of service
Products affected by CVE-2004-1880
- cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.25:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.27:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.24:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.0.26:*:*:*:*:*:*:*
- cpe:2.3:a:openldap:openldap:2.1.6:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-1880
0.98%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-1880
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
Vendor statements for CVE-2004-1880
-
Red Hat 2006-08-30Not vulnerable. These issues did not affect the versions of OpenLDAP as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.
References for CVE-2004-1880
-
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685
CONECTIVA | Análises dos Melhores Produtos Online (#10 Melhores)Patch
Jump to