CVE-2006-1470

MediumCVSS 5.0/10Last modified Sep 23, 2026

Description

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html
http://secunia.com/advisories/20877Vendor Advisory
http://securitytracker.com/id?1016396Patch
http://www.kb.cert.org/vuls/id/652196US Government Resource
http://www.osvdb.org/26932
http://www.securityfocus.com/bid/18686Exploit, Patch
http://www.securityfocus.com/bid/18728Exploit, Patch
http://www.vupen.com/english/advisories/2006/2566Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27480
http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html
http://secunia.com/advisories/20877Vendor Advisory
http://securitytracker.com/id?1016396Patch
http://www.kb.cert.org/vuls/id/652196US Government Resource
http://www.osvdb.org/26932
http://www.securityfocus.com/bid/18686Exploit, Patch
http://www.securityfocus.com/bid/18728Exploit, Patch
http://www.vupen.com/english/advisories/2006/2566Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27480

Timeline

Published: Jun 27, 2006
Last modified: Sep 23, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-14714.6Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary co CVE-2006-14725.0Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folder CVE-2006-14735.0Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and execute CVE-2006-14744.3Cross-site scripting (XSS) vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote attackers to inject a CVE-2006-14752.1Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Da CVE-2006-14762.6Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" (with no ch CVE-2006-14777.5Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute ar CVE-2006-14787.5Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possi CVE-2006-14794.3Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote attackers to inject arbi CVE-2006-14805.1Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (CVE-2006-14816.5SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain CVE-2006-14824.3Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the