Red Hat Security AdvisoryRHSA-2013:0742
389-ds-base security and bug fix update
Released 2013-04-15 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.11.15-14.el6_4, 389-ds-base-devel-1.2.11.15-14.el6_4, 389-ds-base-libs-1.2.11.15-14.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.11.15-14.el6_4, 389-ds-base-devel-1.2.11.15-14.el6_4, 389-ds-base-libs-1.2.11.15-14.el6_4
- Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.11.15-14.el6_4, 389-ds-base-libs-1.2.11.15-14.el6_4
- Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-1.2.11.15-14.el6_4, 389-ds-base-devel-1.2.11.15-14.el6_4
- Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.11.15-14.el6_4, 389-ds-base-libs-1.2.11.15-14.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-1.2.11.15-14.el6_4, 389-ds-base-devel-1.2.11.15-14.el6_4
Fixes 1 record
Priority LOW 17
The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configura…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02096 · Published 2013-05-13 · Partial fix CWE-264
