{"id":"CVE-2006-4600","aliases":["EUVD-2006-4588","GHSA-673w-gf5r-mxmm","RHSA-2007:0310","RHSA-2007:0430"],"status":"published","title":"slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control...","description":"slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).","severity":{"version":"2.0","score":2.3,"vector":"AV:A/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0279,"percentile":0.86507,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2006-09-07T00:00:00Z","modified":"2026-06-26T12:17:22Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"compat-openldap","fixed_in":["0:2.1.30-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-clients","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-debuginfo","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-devel","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-servers","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-servers-sql","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"compat-openldap","fixed_in":["0:2.1.30-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-clients","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-debuginfo","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-devel","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-servers","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-servers-sql","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"compat-openldap","fixed_in":["0:2.1.30-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-clients","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-debuginfo","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-devel","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-servers","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-servers-sql","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"compat-openldap","fixed_in":["0:2.1.30-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-clients","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-debuginfo","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-devel","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-servers","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-servers-sql","fixed_in":["0:2.2.13-7.4E"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-clients","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-debuginfo","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-devel","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-servers","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap-clients","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap-debuginfo","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap-devel","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-clients","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-debuginfo","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-devel","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-servers","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap-clients","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap-debuginfo","fixed_in":["0:2.0.27-23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap-devel","fixed_in":["0:2.0.27-23"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"compat-openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.30-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"compat-openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.30-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"compat-openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.30-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"compat-openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.30-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-7.4E"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.27-23"}]}]}],"products":[{"vendor":"openldap","product":"openldap"}],"references":[{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/22300","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:171","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/25098","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-200711-23.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://secunia.com/advisories/25894","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.openldap.org/lists/openldap-announce/200608/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://issues.rpath.com/browse/RPL-667","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/3229","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.trustix.org/errata/2006/0055","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/447395/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/22273","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/25628","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587","tags":["x_refsource_MISC","x_transferred","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0430.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/2186","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28772","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9618","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securityfocus.com/bid/19832","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0310.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/26909","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/27706","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securitytracker.com/id?1016783","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc","tags":["vendor-advisory","x_refsource_SGI","x_transferred"]},{"url":"http://www.openldap.org/software/release/changes.html","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/22219","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/25676","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/21721","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4600","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-673w-gf5r-mxmm"},{"url":"https://access.redhat.com/errata/RHSA-2007:0310","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=205826","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0310.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4600","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0430","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=174830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=234222","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0430.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2006-4600","description":"slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).","status":"published","published":"2006-09-07T00:00:00Z","modified":"2024-08-07T19:14:47.8Z","updated_at":"2026-11-02T14:33:50.738595Z"}],"euvd":[{"id":"EUVD-2006-4588","description":"slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).","status":"published","published":"2006-09-07T00:00:00Z","modified":"2024-08-07T19:14:47Z","updated_at":"2026-11-03T01:15:51.316983Z"}],"ghsa":[{"id":"GHSA-673w-gf5r-mxmm","title":"slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control...","description":"slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).","status":"published","published":"2022-05-03T03:16:32Z","modified":"2023-02-01T05:01:23Z","updated_at":"2026-11-02T14:49:42.752886Z"}],"nvd":[{"id":"CVE-2006-4600","description":"slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).","status":"published","published":"2006-09-07T00:04:00Z","modified":"2026-06-16T22:29:25.543Z","cvss":[{"version":"2.0","score":2.3,"vector":"AV:A/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:01:05.928789Z"}],"osv":[{"id":"RHSA-2007:0310","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2024-09-15T16:37:48Z","modified":"2026-06-26T10:06:11Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2007:0430","title":"Red Hat Security Advisory: openldap security and bug-fix update","status":"published","published":"2024-09-15T16:37:52Z","modified":"2026-06-26T12:17:22.947109346Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}