Veracode Vulnerability DatabaseVERACODE:23433Information Disclosure
0.006 Low
EPSS
Percentile
79.3%
ipa is vulnerable information disclosure. A flaw was found in the Red Hat Enterprise IPA installation procedure. The master Kerberos password was set up in the LDAP server in such a way that it was possible to retrieve the password via an anonymous LDAP connection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ipa | eq | 1.0.0__15.el5ipa | |
| ipa | eq | 1.0.0__17.el5ipa | |
| ipa | eq | 1.0.0__15.el5ipa | |
| ipa | eq | 1.0.0__17.el5ipa |
References
git.fedorahosted.org/git/freeipa.git/?p=freeipa.git%3Ba=commit%3Bh=9932887f2af38b9701efec27707648c026ec445c
git.fedorahosted.org/git/freeipa.git/?p=freeipa.git;a=commit;h=9932887f2af38b9701efec27707648c026ec445c
rhn.redhat.com/errata/RHSA-2008-0860.html
secunia.com/advisories/31861
www.freeipa.org/page/CVE-2008-3274
www.freeipa.org/page/Downloads
www.freeipa.org/page/News
www.redhat.com/security/updates/classification/#important
www.securityfocus.com/bid/31111
www.securitytracker.com/id?1020850
access.redhat.com/errata/RHSA-2008:0860
bugzilla.redhat.com/show_bug.cgi?id=457835
www.redhat.com/archives/fedora-package-announce/2008-September/msg00733.html
www.redhat.com/archives/fedora-package-announce/2008-September/msg00743.html
Related
