CVE-2018-10850

CVE-2018-10850 affects 389-ds-base prior to versions 1.4.0.10 and 1.3.8.3, caused by a race condition in how persistent searches are handled. An anonymous attacker could trigger a crash and denial of service under load. Affected products across multiple distributions (e.g., 389-ds-base packages o...

CVE-2018-14624

389-ds-base (LDAP directory server) vulnerable to CVE-2018-14624 in versions 1.3.7.10, 1.3.8.8 and 1.4.0.16 due to improper use of the lock for the error log during log__error_emergency() reopen. An attacker could flood a very large DN, causing slapd to crash (DoS). Connected advisories reference...

CVE-2017-15135

CVE-2017-15135 affects 389-ds-base (versions 1.3.6.1 up to 1.4.0.3). The root cause is an insufficient size check in the authentication path (slapi_ct_memcmp in ch_malloc.c), allowing a remote, unauthenticated attacker to bypass authentication under very rare circumstances. Publicly referenced ad...

CVE-2017-15134

CVE-2017-15134 affects 389-ds-base via a stack buffer overflow in slapi_filter_sprintf() when processing certain LDAP search filters. Impact: remote, unauthenticated denial of service by crashing ns-slapd. Affected versions include 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, and ...

CVE-2018-1054

CVE-2018-1054 is an out-of-bounds memory read vulnerability in the 389-ds-base directory server, triggered by certain LDAP search filters. Exploitation could allow a remote, unauthenticated attacker to crash ns-slapd, causing a denial of service. The issue affects all versions including 1.4.x, wi...

CVE-2019-14824

CVE-2019-14824 affects 389-ds-base and its deref plugin, enabling an authenticated attacker to disclose attribute values by abusing the search permission (e.g., password hashes). Public details across connected docs confirm the flaw and show patches across multiple distros: Debian (fixed in 1.3.3...

CVE-2018-1089

CVE-2018-1089 affects 389-ds-base: long search filters with characters needing escapes could cause a buffer overflow, enabling a remote, unauthenticated attacker to crash ns-slapd via a crafted LDAP request (denial of service). Affected versions include 389-ds-base before 1.4.0.9, 1.3.8.1, and 1....

CVE-2018-14638

The CVE-2018-14638 issue affects 389-ds-base; the root cause is a crash in delete_passwdPolicy when persistent search connections terminate unexpectedly, leading to remote denial of service. The vulnerability is described for versions before 1.3.8.4-13, and multiple connected advisories note fixe...

CVE-2019-3883

389-ds-base up to 1.4.1.2 is affected by CVE-2019-3883: SSL/TLS reads ignore the ioblocktimeout, allowing an unauthenticated attacker to trigger hanging LDAP requests that can hang all workers and cause a DoS. Affected products include 389-ds-base deployments on various distros (Red Hat/CentOS, D...

CVE-2018-10871

CVE-2018-10871 affects 389-ds-base prior to versions 1.3.8.5 and 1.4.0.12. When Replica and/or retroChangeLog plugins are enabled, the service stores passwords in plaintext in changelog files. An attacker with high privileges (e.g., root or Directory Manager) can read these files to obtain plaint...

CVE-2018-14648

CVE-2018-14648 affects 389-ds-base / 389 Directory Server. It describes a Denial of Service: a specially crafted search query can cause excessive CPU in do_search(), exploitable by an unauthenticated attacker over the network. The issue is tied to mishandled or malformed search requests in server...

CVE-2014-3562

The CVE-2014-3562 issue affects Red Hat Directory Server 8 and 389 Directory Server when debugging is enabled, where the server could disclose potentially sensitive replicated metadata during directory searches. Root cause: replication metadata is exposed in search results if debugging is enabled...

CVE-2019-10224

CVE-2019-10224 affects 389-ds-base versions 1.4.x before 1.4.1.3. In verbose mode, dscreate/dsconf may display sensitive information such as the Directory Manager password, enabling an on-screen viewer or a recorded stderr to extract confidential data. The connected advisories (Debian/Red Hat/Ama...

CVE-2016-0741

Summary: CVE-2016-0741 affects 389-ds-base (389 Directory Server) with a DoS by abnormally closed connections. The vulnerability occurs in slapd/connection.c across 1.3.4.x branches prior to 1.3.4.7, where worker threads fail to detect closed connections, enabling an infinite loop and connection ...

CVE-2017-7551

389-ds-base versions before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout because of different return codes on password attempts. Multiple connected advisories (MiracleLinux AXSA-2017-2225, EulerOS-SA-2019-2369, openSUSE/OpenSUSE-2017-1396, Amazon Linu...

CVE-2015-1854

CVE-2015-1854 affects 389-ds-base (Directory Server). The flaw allows an unauthenticated attacker to bypass access controls by issuing an ldapmodrdn call, enabling unauthorized modifications of directory entries. Connected sources (Debian DLA-1428, Debian tracker, Amazon ALAS-2015-538, Fedora 201...

CVE-2013-4485

The CVE-2013-4485 issue affects 389-ds-base (389 Directory Server) and is cited across multiple advisories linked to 389-ds-base 1.2.11.15, including MiracleLinux AXSA-2014-026/02 and AXSA-2014-109 references. The root cause is improper handling of GER (Get Effective Rights) search queries when t...

CVE-2013-2219

The CVE affects Red Hat Directory Server and its open source equivalent, 389 Directory Server. The root cause is improper enforcement of access controls for attributes during search filter evaluation, enabling remote authenticated users to retrieve values of restricted attributes via a query. The...

CVE-2019-10171

CVE-2019-10171 notes a regression in the 389-ds-base fix for CVE-2018-14648 where the patch was misapplied on RHEL 7.5, leaving the service vulnerable to an attacker provoking excessive CPU usage and a denial of service. The issue affects 389-ds-base versions 1.4.0.x prior to 1.4.0.17, with impac...

CVE-2017-2668

CVE-2017-2668 affects 389-ds-base before 1.3.5.17 and 1.3.6.10, where an invalid pointer dereference in LDAP bind handling allows remote unauthenticated attackers to crash ns-slapd, causing denial of service. Affected product is 389 Directory Server; impact is denial of service via crafted LDAP b...

CVE-2012-0833

The CVE-2012-0833 issue affects 389 Directory Server (389-ds-base) prior to version 1.2.10, where acllas__handle_group_entry mis-processes ACIs that use certificate groups. This can allow remote authenticated LDAP users with a certificate group to bind and trigger an infinite loop with high CPU u...

CVE-2010-3282

CVE-2010-3282 covers a local information disclosure in HP-UX Directory Server and Red Hat Directory Server for HP-UX where audit logging logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, enabling local users to read sensitive data from logs....

CVE-2012-2678

CVE-2012-2678 affects 389-ds-base (also Red Hat Directory Server) before version 1.2.11.6. Per the description, after an LDAP user’s password is changed and before the server is reset, an attacker could remotely read the plaintext password via the unhashed#user#password attribute. This vulnerabil...

CVE-2014-8105

The CVE-2014-8105 issue affects 389-ds-base (389 Directory Server) prior to 1.3.2.27 and 1.3.3.x before 1.3.3.9. The root cause is insufficient access restriction of the cn=changelog LDAP subtree, enabling information disclosure of changelog contents. Several connected reports (Fedora/CentOS/Red ...

CVE-2017-2591

CVE-2017-2591 affects 389-ds-base prior to 1.3.6. The vulnerability arises from an improperly NULL terminated array in the uniqueness_entry_to_config() function of the attribute uniqueness plugin, enabling an attacker (authenticated or possibly unauthenticated) to trigger an out-of-bounds heap re...

CVE-2013-4283

CVE-2013-4283 affects ns-slapd in 389 Directory Server prior to 1.3.0.8, enabling a remote attacker to crash the server via a crafted DN in a MOD operation. The vulnerability is confirmed by OpenVAS/Open Vulnerability references; remediation is to apply the vendor/security updates that include 38...

CVE-2014-8112

389-ds-base (389 Directory Server) is affected: for 1.3.2.x prior to 1.3.2.27 and 1.3.3.x prior to 1.3.3.9, unhashed passwords can be written to the Changelog when nsslapd-unhashed-pw-switch is off, enabling read access to sensitive data by a remote authenticated user. The connected advisories in...

CVE-2014-0132

CVE-2014-0132 affects 389 Directory Server: SASL authentication can be abused via the authzid parameter in a SASL/GSSAPI bind to connect as an arbitrary user and gain privileges. Mageia advisory MGASA-2014-0145 indicates updated 389-ds-base packages fix this vulnerability; apply the vendor-provid...

CVE-2011-0532

In Red Hat Directory Server (389 Directory Server 1.2.x / Red Hat Directory Server 8.2.x), three scripts (backup/restore, main init, ldap-agent) place a zero-length entry in LD_LIBRARY_PATH, enabling local privilege escalation via a Trojan horse shared library in the attacker’s directory. This is...

CVE-2013-0312

CVE-2013-0312 affects 389-ds-base/389 Directory Server. Affected: 389-ds-base prior to 1.3.0.4. Root cause: processing of a zero-length LDAP control sequence can crash the LDAP server, leading to denial of service (partial availability). Public references in the connected docs confirm the vulnera...

CVE-2013-1897

CVE-2013-1897 affects 389-ds-base (389 Directory Server) prior to 1.2.11.20 and 1.3.x prior to 1.3.0.5. The do_search in ldap/servers/slapd/search.c fails to restrict anonymous access when nsslapd-allow-anonymous-access is rootdse and the BASE scope is used, enabling remote attackers to view info...

CVE-2011-0019

CVE-2011-0019 affects 389 Directory Server / Red Hat Directory Server (Directory Server 1.2.7.5 / 1.2.x) where slapd/ns-slapd mishandles simple paged result searches. The underlying issue is improper handling of Simple Paged Results, allowing remote attackers to trigger a denial-of-service (daemo...

CVE-2012-4450

CVE-2012-4450 affects 389-ds-base (389 Directory Server) versions around 1.2.10. The issue arises when a DN entry is moved via modrdn; ACLs are not updated correctly, potentially allowing remote authenticated users with certain permissions to bypass ACL restrictions and access the moved DN entry....

CVE-2015-3230

The CVE targets 389-ds-base (389 Directory Server) prior to version 1.3.3.12, where the nsSSL3Ciphers preference is not enforced when creating an sslSocket. This allows a remote attacker to request a disabled cipher, with impact described as unspecified in the sources. Public advisories confirm a...

CVE-2011-0022

CVE-2011-0022 involves Red Hat Directory Server 1.2.x where setup scripts for multiple unprivileged instances create /var/run/dirsrv with 0777 permissions. This permits a local user to interfere with PID files in that directory, causing a denial of service by replacing PID files or preventing pro...

CVE-2012-2746

CVE-2012-2746 affects 389-ds-base/Red Hat Directory Server prior to 1.2.11.6: when an LDAP user password is changed and audit logging is enabled, the new password is saved to logs in plain text, permitting remote authenticated users to read it. Affected version note appears in multiple advisories...

CVE-2010-4746

The CVE-2010-4746 issue affects 389 Directory Server prior to 1.2.7.5, where multiple memory leaks occur in the normalization path (DN normalization and syntax normalization). The root cause is stated as Slapi_Attr mishandling in the DN normalization code and pointer mishandling in the syntax nor...

CVE-2011-1067

The CVE-2011-1067 entry affects slapd (389 Directory Server) before 1.2.8.a2. The vulnerability is due to improper handling of the c_timelimit field in the connection table, allowing remote attackers to cause a denial of service (daemon outage/crash) via Simple Paged Results connections (demonstr...

CVE-2011-0704

The CVE-2011-0704 issue affects 389 Directory Server 1.2.7.5 when compiled with mozldap, where a remote attacker can cause a denial of service (replica crash) by sending an empty modify request. This is the stated impact; the connected documents do not supply a workaround or patch version. No exp...