CVE-2008-0658

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-02-13 · updated 2026-06-16
Weakness: CWE-399

Description

slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.

Affected products

openldap: 2.3.39

References

http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
http://secunia.com/advisories/28914
http://secunia.com/advisories/28926
http://secunia.com/advisories/28953
http://secunia.com/advisories/29068
http://secunia.com/advisories/29225
http://secunia.com/advisories/29256
http://secunia.com/advisories/29461
http://secunia.com/advisories/29682
http://secunia.com/advisories/29957
http://security.gentoo.org/glsa/glsa-200803-28.xml

Get alerted when CVE-2008-0658 or the next vulnerability affects your stack