CVE-2012-4450
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.7%
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| fedoraproject:389_directory_server | fedoraproject 389 directory server | eq | 1.2.10 |
References
git.fedorahosted.org/cgit/389/ds.git/commit/?id=5beb93d42efb807838c09c5fab898876876f8d09
rhn.redhat.com/errata/RHSA-2013-0503.html
secunia.com/advisories/50713
www.openwall.com/lists/oss-security/2012/09/26/3
www.openwall.com/lists/oss-security/2012/09/26/5
www.securityfocus.com/bid/55690
bugzilla.redhat.com/show_bug.cgi?id=860772
fedorahosted.org/389/ticket/340
Related
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.7%