Red Hat Security AdvisoryRHSA-2014:0292
389-ds-base security update
Released 2014-03-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.11.15-32.el6_5, 389-ds-base-devel-1.2.11.15-32.el6_5, 389-ds-base-libs-1.2.11.15-32.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.11.15-32.el6_5, 389-ds-base-devel-1.2.11.15-32.el6_5, 389-ds-base-libs-1.2.11.15-32.el6_5
- Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.11.15-32.el6_5, 389-ds-base-libs-1.2.11.15-32.el6_5
- Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-1.2.11.15-32.el6_5, 389-ds-base-devel-1.2.11.15-32.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.11.15-32.el6_5, 389-ds-base-libs-1.2.11.15-32.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-1.2.11.15-32.el6_5, 389-ds-base-devel-1.2.11.15-32.el6_5
Fixes 1 record
Priority LOW 33
The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0219 · Published 2014-03-18 · Fixed CWE-287
