CVE-2008-0658
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote...
4.0 Medium
CVE-2008-0658 is a medium vulnerability (CVSS 4.0) in Openldap, published February 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.05%, the 87th percentile. No source names a fixed version.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.05%EPSS, 87th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
Exploit likelihood
3.05%Up 0.5 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openldap2.3Debian:4.0 From an advisory covering 4 CVEs | before 2.3.30-5+etch1, plus listed versions 2.3.30-5 | 2.3.30-5+etch1 |
compat-openldapRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-clientsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
compat-openldapRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openldap-clientsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
compat-openldapRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-clientsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
compat-openldapRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.1.30-8.el4_6.4 | 0:2.1.30-8.el4_6.4 |
openldapRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-clientsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-serversRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldap-servers-sqlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.2.13-8.el4_6.4 | 0:2.2.13-8.el4_6.4 |
openldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-serversRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-servers-sqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
compat-openldapRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.3.27_2.2.29-8.el5_1.3 | 0:2.3.27_2.2.29-8.el5_1.3 |
openldapRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-clientsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
compat-openldapRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.3.27_2.2.29-8.el5_1.3 | 0:2.3.27_2.2.29-8.el5_1.3 |
openldapRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-clientsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-serversRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
openldap-servers-sqlRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:2.3.27-8.el5_1.3 | 0:2.3.27-8.el5_1.3 |
What each source reports
NVD Score used
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
- Record
CVE-2008-0658- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE ListNo score
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
- Record
CVE-2008-0658- Updated
- 2026-11-02
EUVDEUVD-2008-0668No score
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
- Record
EUVD-2008-0668- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8qj7-7p8r-jhqjNo score
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote...
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
- Record
GHSA-8qj7-7p8r-jhqj- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
mandriva.com/security/advisories?name=MDVSA-2008:058
secunia.com/advisories/29461
openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/modrdn.c.diff?r1=1.197&r2=1.198&f=h
wiki.rpath.com/Advisories:rPSA-2008-0059
Show 34 moreShow less
securityfocus.com/archive/1/488242/100/200/threaded
security.gentoo.org/glsa/glsa-200803-28.xml
ubuntu.com/usn/usn-584-1
redhat.com/support/errata/RHSA-2008-0110.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9470
debian.org/security/2008/dsa-1541
exchange.xforce.ibmcloud.com/vulnerabilities/40479
vupen.com/english/advisories/2009/3184
lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
support.apple.com/kb/HT3937
securitytracker.com/id?1019481
nvd.nist.gov/vuln/detail/CVE-2008-0658
github.com/advisories/GHSA-8qj7-7p8r-jhqj
access.redhat.com/errata/RHSA-2008:0110
bugzilla.redhat.com/show_bug.cgi?id=431203
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0110.json
cve.org/CVERecord?id=CVE-2007-6698