Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2024-1062

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora 389 Directory Server Directory Server and 14 more
CVE-2017-7551

389-ds-base: Password brute-force possible for locked account due to different return codes

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2014-8105

389-ds-base: information disclosure through 'cn=changelog' subtree

389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Fedora Enterprise Linux
CVE-2014-0132

389-ds: flaw in parsing authzid can lead to privilege escalation

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.

CVSS 2.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2015-3230

389-ds-base: nsSSL3Ciphers preference not enforced server side (regression)

389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.

CVSS 2.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2014-8112

389-ds-base: password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off

389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.

CVSS 2.0 · 4.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Fedora Enterprise Linux
CVE-2016-0741

389-ds-base: worker threads do not detect abnormally closed connections causing DoS

slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux Enterprise Linux Desktop and 3 more
CVE-2011-1067

Server: DoS via Simple Paged Results connections

slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field of the connection table element, which allows remote attackers to cause a denial of service (daemon outage) via Simple Paged Results connections, as demonstrated by using multiple processes to replay TCP sessions, a different vulnerability than CVE-2011-0019.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject
Products
389 Directory Server
CVE-2013-1897

389-ds: unintended information exposure when rootdse is enabled

The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.

CVSS 2.0 · 2.6 Low EPSS 2.1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2013-2219

Server: ACLs inoperative in some search scenarios

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.

CVSS 2.0 · 4.0 Medium EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Directory Server Enterprise Linux
CVE-2013-4283

389-ds-base: ns-slapd crash due to bogus DN

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2013-0312

389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2011-0019

Server: crash with multiple simple paged result searches

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simple paged result searches, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via multiple search requests.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Directory Server
CVE-2012-4450

389-ds-base: Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in ACL (ACL rules bypass possible)

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.

CVSS 2.0 · 6.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux
CVE-2012-2746

rhds/389: plaintext password disclosure in audit log

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.

CVSS 2.0 · 2.1 Low EPSS 1.3% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Directory Server Enterprise Linux
CVE-2011-0532

Server: use of insecure LD_LIBRARY_PATH settings

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x) place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Directory Server
CVE-2012-2678

rhds/389: plaintext password disclosure flaw

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Directory Server Enterprise Linux