{
    "id": "CVE-2007-4566",
    "published": "2007-08-28 01:17:00",
    "last_modified": "2026-06-16 22:44:20",
    "cvss_score": "10.0",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
    "cwe": "CWE-119",
    "description": "Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.",
    "epss_score": "0.15326",
    "epss_percentile": "0.96671",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-30 18:17:06",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "alpha_centauri_software",
            "product": "sidvault_ldap_server"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "9596",
            "title": "SIDVault 2.0e - Windows Universal Buffer Overflow (SEH)",
            "date": "2009-09-09",
            "url": "https://www.exploit-db.com/exploits/9596"
        },
        {
            "source": "exploit-db",
            "ref_id": "9592",
            "title": "SIDVault 2.0e - Windows Remote Buffer Overflow (Metasploit)",
            "date": "2009-09-04",
            "url": "https://www.exploit-db.com/exploits/9592"
        },
        {
            "source": "exploit-db",
            "ref_id": "9586",
            "title": "SIDVault 2.0e - Windows Remote Buffer Overflow",
            "date": "2009-09-03",
            "url": "https://www.exploit-db.com/exploits/9586"
        },
        {
            "source": "exploit-db",
            "ref_id": "4315",
            "title": "SIDVault LDAP Server - Remote Buffer Overflow",
            "date": "2007-08-25",
            "url": "https://www.exploit-db.com/exploits/4315"
        }
    ],
    "refs_list": [
        "http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html",
        "http://secunia.com/advisories/26613",
        "http://securityreason.com/securityalert/3061",
        "http://www.securityfocus.com/archive/1/477821/100/0/threaded",
        "http://www.securityfocus.com/bid/25460",
        "http://www.securitytracker.com/id?1018612",
        "http://www.vupen.com/english/advisories/2007/2976",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/36272",
        "http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html",
        "http://secunia.com/advisories/26613",
        "http://securityreason.com/securityalert/3061",
        "http://www.securityfocus.com/archive/1/477821/100/0/threaded",
        "http://www.securityfocus.com/bid/25460",
        "http://www.securitytracker.com/id?1018612",
        "http://www.vupen.com/english/advisories/2007/2976",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/36272"
    ]
}