Red Hat Security AdvisoryRHSA-2015:0895
389-ds-base security update
Released 2015-04-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.3.1-16.el7_1, 389-ds-base-devel-1.3.3.1-16.el7_1, 389-ds-base-libs-1.3.3.1-16.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.3.1-16.el7_1, 389-ds-base-devel-1.3.3.1-16.el7_1, 389-ds-base-libs-1.3.3.1-16.el7_1
- Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.3.1-16.ael7b_1, 389-ds-base-1.3.3.1-16.el7_1, 389-ds-base-libs-1.3.3.1-16.ael7b_1 +1
- Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-devel-1.3.3.1-16.ael7b_1, 389-ds-base-devel-1.3.3.1-16.el7_1
- Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.3.1-16.el7_1, 389-ds-base-libs-1.3.3.1-16.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.3.1-16.el7_1
Fixes 1 record
Priority LOW 37
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02142 · Published 2017-09-19 · Fixed CWE-284
