Lucene search
Ubuntu.comUB:CVE-2014-8112HistoryMar 10, 2015 - 12:00 a.m.
CVE-2014-8112
2015-03-1000:00:00
ubuntu.com
ubuntu.com
10
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
56.4%
389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before
1.3.3.9 stores “unhashed” passwords even when the
nsslapd-unhashed-pw-switch option is set to off, which allows remote
authenticated users to obtain sensitive information by reading the
Changelog.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779909>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8112>
Notes
| Author | Note |
|---|---|
| tyhicks | Versions 1.3.1 and later |
Related
prion
prion
Code injection
2015-03-10 14:59:00
cve
cve
CVE-2014-8112
2015-03-10 14:59:01
cvelist
cvelist
CVE-2014-8112
2015-03-10 14:00:00
debiancve
debiancve
CVE-2014-8112
2015-03-10 14:59:01
nvd
nvd
CVE-2014-8112
2015-03-10 14:59:01
nessus
nessus
RHEL 7 : 389-ds-base (RHSA-2015:0416)
2015-03-05 00:00:00
Amazon Linux AMI : 389-ds-base (ALAS-2015-501)
2015-04-02 00:00:00
Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20150305)
2015-03-26 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2015-0416)
2015-10-06 00:00:00
RedHat Update for 389-ds-base RHSA-2015:0416-01
2015-03-06 00:00:00
Fedora Update for 389-ds-base FEDORA-2015-3368
2015-07-07 00:00:00
centos
centos
389 security update
2015-03-17 13:27:32
mageia
mageia
Updated 389-ds-base packages fix security vulnerabilities
2015-03-14 21:44:24
amazon
amazon
Important: 389-ds-base
2015-04-01 13:49:00
redhat
redhat
fedora
fedora
[SECURITY] Fedora 22 Update: 389-ds-base-1.3.3.9-1.fc22
2015-03-31 21:43:31
oraclelinux
oraclelinux
389-ds-base security, bug fix, and enhancement update
2015-03-09 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
56.4%
Related for UB:CVE-2014-8112