Lucene search
RedhatCVELIST:CVE-2013-1897HistoryMay 13, 2013 - 11:00 p.m.
CVE-2013-1897
2013-05-1323:00:00
redhat
www.cve.org
2
The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.
References
lists.fedoraproject.org/pipermail/package-announce/2013-April/101323.html
rhn.redhat.com/errata/RHSA-2013-0742.html
bugzilla.redhat.com/show_bug.cgi?id=928105
fedorahosted.org/389/ticket/47308
fedorahosted.org/freeipa/ticket/3540
git.fedorahosted.org/cgit/389/ds.git/commit/?h=389-ds-base-1.2.11&id=5a18c828533a670e7143327893f8171a19062286
Related
amazon
amazon
Low: 389-ds-base
2013-04-18 15:39:00
openvas
openvas
RedHat Update for 389-ds-base RHSA-2013:0742-01
2013-04-19 00:00:00
RedHat Update for 389-ds-base RHSA-2013:0742-01
2013-04-19 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-184)
2015-09-08 00:00:00
redhat
redhat
(RHSA-2013:0742) Low: 389-ds-base security and bug fix update
2013-04-15 00:00:00
cve
cve
CVE-2013-1897
2013-05-13 23:55:01
nessus
nessus
Oracle Linux 6 : 389-ds-base (ELSA-2013-0742)
2013-07-12 00:00:00
CentOS 6 : 389-ds-base (CESA-2013:0742)
2013-04-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package freeipa version 3.1.99-3
2013-04-02 00:00:00
oraclelinux
oraclelinux
389-ds-base security and bug fix update
2013-04-15 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 08:51:48
centos
centos
389 security update
2013-04-16 11:10:18
ubuntucve
ubuntucve
CVE-2013-1897
2013-05-13 00:00:00
nvd
nvd
CVE-2013-1897
2013-05-13 23:55:01
prion
prion
Information disclosure
2013-05-13 23:55:00
debiancve
debiancve
CVE-2013-1897
2013-05-13 23:55:01
fedora
fedora
[SECURITY] Fedora 18 Update: 389-ds-base-1.3.0.5-1.fc18
2013-04-03 04:32:01
[SECURITY] Fedora 17 Update: 389-ds-base-1.2.11.21-1.fc17
2013-06-13 06:11:57
[SECURITY] Fedora 18 Update: freeipa-3.1.3-4.fc18
2013-04-11 10:07:12