Lucene search

K
seebugRootSSV:61823
HistoryMar 18, 2014 - 12:00 a.m.

389 Directory Server SASL/GSSAPI验证绕过漏洞

2014-03-1800:00:00
Root
www.seebug.org
23

EPSS

0.006

Percentile

77.9%

Bugtraq ID:66235
CVE ID:CVE-2014-0132

389 Directory Server的前身是Fedora Directory Server,是一个企业级的Linux目录服务器。

当指定"authzid"参数时389 Directory Server不正确处理SASL/GSSAPI验证,允许远程攻击者利用漏洞使用其他用户目录。
0
389 Directory Server (formerly known as Fedora Directory Server) 1.3.1.20
389 Directory Server (formerly known as Fedora Directory Server) 1.3.2.14
389 Directory Server 1.3.1.20或1.3.2.14已经修复该漏洞,建议用户下载更新:
http://directory.fedoraproject.org/