We use OpenLDAP version 2.4.24
$ /usr/local/libexec/slapd -VV @(#) $OpenLDAP: slapd 2.4.24 (Mar 5 2011 06:36:43) $ steve@sunblade2500:/bigdisk/SOURCES/S10/openldap-2.4.24/servers/slapd
OpenLDAP version 2.4.33 is currently available (27.11.2012).
We need to decide if we upgrade
- expert in OpenLDAP left us
- are in our version risky vulnerabilities?
- is there a good web interface to check $SOFTWARE_NAME and $VERSION and see known vulnerabilities with risk score.
I found http://www.cvedetails.com/vulnerability-list/vendor_id-439/Openldap.html but can't filter on version number.