Every CVE Search/ Get API key

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a...

4.6 MediumFix available

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Exploit likelihood

2.59%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Record
CVE-2011-1024
CVSS 2.0
4.6 MediumAV:N/AC:H/Au:S/C:P/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Record
CVE-2011-1024
Updated
2026-11-02
EUVDEUVD-2011-1041 No score

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Record
EUVD-2011-1041
Updated
2026-11-03
GitHub AdvisoriesGHSA-v9w5-g35w-fmjv No score

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a...

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Record
GHSA-v9w5-g35w-fmjv
Updated
2026-11-02
OSV No score

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Record
CVE-2011-1024
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1024 No score

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Record
DEBIAN-CVE-2011-1024
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openldap
Debian:12
 before 2.4.25-1
2.4.25-1
openldap
Debian:13
 before 2.4.25-1
2.4.25-1
openldap
Debian:14
 before 2.4.25-1
2.4.25-1
compat-openldap
Red Hat:enterprise_linux:5::server
 before 0:2.3.43_2.2.29-12.el5_6.7
0:2.3.43_2.2.29-12.el5_6.7
openldap
Red Hat:enterprise_linux:5::server
 before 0:2.3.43-12.el5_6.7
0:2.3.43-12.el5_6.7
openldap-clients
Red Hat:enterprise_linux:5::server
 before 0:2.3.43-12.el5_6.7
0:2.3.43-12.el5_6.7
openldap-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.3.43-12.el5_6.7
0:2.3.43-12.el5_6.7
openldap-devel
Red Hat:enterprise_linux:5::server
 before 0:2.3.43-12.el5_6.7
0:2.3.43-12.el5_6.7
openldap-servers
Red Hat:enterprise_linux:5::server
 before 0:2.3.43-12.el5_6.7
0:2.3.43-12.el5_6.7
openldap-servers-overlays
Red Hat:enterprise_linux:5::server
 before 0:2.3.43-12.el5_6.7
0:2.3.43-12.el5_6.7
Show 29 moreShow less
Affected packages
PackageAffectedFixed
openldap-servers-sql
Red Hat:enterprise_linux:5::server
 before 0:2.3.43-12.el5_6.7
0:2.3.43-12.el5_6.7
openldap
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::client
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::client
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::server
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::server
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers-sql
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
compat-openldap
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19_2.3.43-15.el6_0.2
0:2.4.19_2.3.43-15.el6_0.2
openldap-clients
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2
openldap-servers
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.19-15.el6_0.2
0:2.4.19-15.el6_0.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1024 is a medium vulnerability (CVSS 4.6) in Openldap, published March 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.59%, the 85th percentile. Fixed in openldap 2.4.25-1.

References

Show 33 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open