{"id":"CVE-2007-4566","aliases":["EUVD-2007-4548","GHSA-9g37-pxq7-m5jq"],"status":"published","title":"Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault...","description":"Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.15326,"percentile":0.96794,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-08-28T01:00:00Z","modified":"2026-06-16T22:44:20Z","exploits":[{"source":"exploitdb","id":"EDB-4315","title":"SIDVault LDAP Server - Remote Buffer Overflow","type":"remote","platform":"linux","date":"2007-08-25","verified":true,"url":"https://www.exploit-db.com/exploits/4315"},{"source":"exploitdb","id":"EDB-9586","title":"SIDVault 2.0e - Windows Remote Buffer Overflow","type":"remote","platform":"windows","date":"2009-09-03","verified":true,"url":"https://www.exploit-db.com/exploits/9586"},{"source":"exploitdb","id":"EDB-9592","title":"SIDVault 2.0e - Windows Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2009-09-04","verified":true,"url":"https://www.exploit-db.com/exploits/9592"},{"source":"exploitdb","id":"EDB-9596","title":"SIDVault 2.0e - Windows Universal Buffer Overflow (SEH)","type":"remote","platform":"windows","date":"2009-09-09","verified":true,"url":"https://www.exploit-db.com/exploits/9596"}],"products":[{"vendor":"alpha_centauri_software","product":"sidvault_ldap_server"}],"references":[{"url":"http://www.securitytracker.com/id?1018612","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/26613","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3061","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/bid/25460","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/477821/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36272","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/2976","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4566"},{"url":"https://github.com/advisories/GHSA-9g37-pxq7-m5jq"}],"sources":{"cve":[{"id":"CVE-2007-4566","description":"Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.","status":"published","published":"2007-08-28T01:00:00Z","modified":"2024-08-07T15:01:09.794Z","updated_at":"2026-11-02T13:33:19.093583Z"}],"euvd":[{"id":"EUVD-2007-4548","description":"Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.","status":"published","published":"2007-08-28T01:00:00Z","modified":"2024-08-07T15:01:09Z","updated_at":"2026-11-03T01:16:21.106382Z"}],"ghsa":[{"id":"GHSA-9g37-pxq7-m5jq","title":"Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault...","description":"Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.","status":"published","published":"2022-05-01T18:24:52Z","modified":"2023-01-31T05:04:43Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:43.49737Z"}],"nvd":[{"id":"CVE-2007-4566","description":"Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.","status":"published","published":"2007-08-28T01:17:00Z","modified":"2026-06-16T22:44:20.443Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:19.102336Z"}]}}