Red Hat Security AdvisoryRHSA-2015:0416
389-ds-base security, bug fix, and enhancement update
Released 2015-03-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.3.1-13.el7, 389-ds-base-devel-1.3.3.1-13.el7, 389-ds-base-libs-1.3.3.1-13.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.3.1-13.el7, 389-ds-base-devel-1.3.3.1-13.el7, 389-ds-base-libs-1.3.3.1-13.el7
- Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.3.1-13.el7, 389-ds-base-libs-1.3.3.1-13.el7
- Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-devel-1.3.3.1-13.el7
- Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.3.1-13.el7, 389-ds-base-libs-1.3.3.1-13.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.3.1-13.el7
Fixes 2 records
Priority LOW 27
389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02108 · Published 2015-03-10 · Fixed CWE-200
Priority LOW 22
389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obta…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01692 · Published 2015-03-10 · Fixed CWE-200
