Red Hat Security AdvisoryRHSA-2012:0997
389-ds-base security update
Released 2012-06-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.10.2-18.el6_3, 389-ds-base-devel-1.2.10.2-18.el6_3, 389-ds-base-libs-1.2.10.2-18.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.10.2-18.el6_3, 389-ds-base-devel-1.2.10.2-18.el6_3, 389-ds-base-libs-1.2.10.2-18.el6_3
- Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.10.2-18.el6_3, 389-ds-base-libs-1.2.10.2-18.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-1.2.10.2-18.el6_3, 389-ds-base-devel-1.2.10.2-18.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.10.2-18.el6_3, 389-ds-base-libs-1.2.10.2-18.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-1.2.10.2-18.el6_3, 389-ds-base-devel-1.2.10.2-18.el6_3
Fixes 2 records
Priority LOW 14
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which…
CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.01314 · Published 2012-07-03 · Partial fix CWE-310
Priority LOW 9
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00636 · Published 2012-07-03 · Fixed CWE-310
