Every CVE Search/ Get API key

CVE-2011-1025

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root...

6.8 MediumFix available

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Exploit likelihood

3.87%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Record
CVE-2011-1025
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Record
CVE-2011-1025
Updated
2026-11-02
EUVDEUVD-2011-1042 No score

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Record
EUVD-2011-1042
Updated
2026-11-03
GitHub AdvisoriesGHSA-7m73-q993-vw77 No score

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root...

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Record
GHSA-7m73-q993-vw77
Weakness
CWE-287
Updated
2026-11-02
OSV No score

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Record
CVE-2011-1025
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1025 No score

bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.

Record
DEBIAN-CVE-2011-1025
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openldap
Debian:12
 before 2.4.25-1
2.4.25-1
openldap
Debian:13
 before 2.4.25-1
2.4.25-1
openldap
Debian:14
 before 2.4.25-1
2.4.25-1
openldap
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::client
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
Show 21 moreShow less
Affected packages
PackageAffectedFixed
openldap
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::server
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1025 is a medium vulnerability (CVSS 6.8) in Openldap, published March 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.87%, the 90th percentile. Fixed in openldap 2.4.25-1.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open