CVE-2002-0045: Openldap

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.

Affected products

• Openldap Openldap: up to and including 2.0.19; version 2.0 only
• Red Hat Linux: version 7.0 only; version 7.1 only; version 7.2 only

Published 2002-01-31. Last modified 2026-06-16.