CVE-2007-4566 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 15.3% (pctl 97)
Patch early
A public exploit exists.
Description
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 15.33% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-08-28 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| alpha centauri software | sidvault ldap server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | SIDVault 2.0e - Windows Universal Buffer Overflow (SEH) | 2009-09-09 |
| exploit-db | SIDVault 2.0e - Windows Remote Buffer Overflow (Metasploit) | 2009-09-04 |
| exploit-db | SIDVault 2.0e - Windows Remote Buffer Overflow | 2009-09-03 |
| exploit-db | SIDVault LDAP Server - Remote Buffer Overflow | 2007-08-25 |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html
- http://secunia.com/advisories/26613
- http://securityreason.com/securityalert/3061
- http://www.securityfocus.com/archive/1/477821/100/0/threaded
- http://www.securityfocus.com/bid/25460
- http://www.securitytracker.com/id?1018612
- http://www.vupen.com/english/advisories/2007/2976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html
- http://secunia.com/advisories/26613
- http://securityreason.com/securityalert/3061
- http://www.securityfocus.com/archive/1/477821/100/0/threaded
- http://www.securityfocus.com/bid/25460
- http://www.securitytracker.com/id?1018612
- http://www.vupen.com/english/advisories/2007/2976
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36272
→ the Explorer · watch your stack · NVD