Debian Security Bug TrackerDEBIANCVE:CVE-2013-1897CVE-2013-1897
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.6%
The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | 389-ds-base | < 1.3.2.9-1 | 389-ds-base_1.3.2.9-1_all.deb |
| Debian | 11 | all | 389-ds-base | < 1.3.2.9-1 | 389-ds-base_1.3.2.9-1_all.deb |
| Debian | 999 | all | 389-ds-base | < 1.3.2.9-1 | 389-ds-base_1.3.2.9-1_all.deb |
| Debian | 13 | all | 389-ds-base | < 1.3.2.9-1 | 389-ds-base_1.3.2.9-1_all.deb |
Related
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.6%