« Volver al listado

CVE-2014-9713

Estado: ModificadaMedia (4)—

The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Debian — Debian LinuxOpenldap — Openldap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-9713",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@debian.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-04-01T14:59:00.067",
  "references": [
    {
      "url": "http://www.debian.org/security/2015/dsa-3209",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@debian.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2015/03/29/2",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/73217",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-2742-1",
      "source": "security@debian.org"
    },
    {
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2015/dsa-3209",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2015/03/29/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/73217",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-2742-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761406",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La configuración por defecto slapd en el paquete Debian openldap 2.4.23-3 hasta 2.4.39-1.1 permite a usuarios remotos autenticados modificar los permisos de usuarios y otros atributos de usuarios a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:18:51.643",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DE5D180-3972-40A0-ADAF-A4F3364D1381"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD76F376-00D8-4917-BF68-6EECC316C331"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7063C11-3BF5-4037-ADC3-0C7E9AF830B4"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAE258EA-1B57-4189-AD5A-7E2ACF223167"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C492F5F5-A6FD-4BED-890A-79254138CC0A"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6F7FDE8-2E54-4162-AA5F-D81253AAC8FA"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.29:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "693E3145-FDDB-4780-886B-6D7FC7B2C5B3"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BF32056-CC6A-4B2B-8FAA-F573445B9B99"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93B99338-4A1A-4483-8308-49BCCB325C30"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE652CE3-E16B-4062-8253-F3FB52A651EA"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A30ED6D-1DB8-4563-B131-1532F97F9694"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.34:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7764366D-29BB-4D75-A33C-7C17DA7496DE"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.35:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A38D99B-370E-430A-A657-CD9FF72D0863"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.36:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB3D3034-D938-402D-A02F-3F4005C438AA"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.37:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7D979A0-3214-4DC6-A838-0AD2444CA5FD"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.38:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25B3EF5D-7889-4206-838C-E932AFCBE15D"
            },
            {
              "criteria": "cpe:2.3:a:openldap:openldap:2.4.39:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B20FA14-9F5B-425D-ACEF-A2348252C39A"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@debian.org"
}