Updated 389-ds-base package fixes security vulnerability

2014-03-3123:44:51

Gentoo Foundation

advisories.mageia.org

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.006

Percentile

77.9%

JSON

It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager account. This could allow them to modify configuration values, as well as read and write any data the directory holds (CVE-2014-0132).

OSVersionArchitecturePackageVersionFilename
Mageia3noarch389-ds-base< 1.3.0.9-1.1389-ds-base-1.3.0.9-1.1.mga3
Mageia4noarch389-ds-base< 1.3.2.7-1.1389-ds-base-1.3.2.7-1.1.mga4