Lucene search
RedhatCVE-2013-4485HistoryNov 23, 2013 - 11:55 a.m.
CVE-2013-4485
2013-11-2311:55:04
CWE-20
redhat
web.nvd.nist.gov
40
cve-2013-4485
389 directory server
red hat directory server
denial of service
crash
nvd
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
64.8%
389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.
Affected configurations
Node
redhatenterprise_linuxMatch6.0
Node
fedoraproject389_directory_serverMatch1.2.11.15
ORredhatdirectory_serverRange≤8.2
ORredhatdirectory_serverMatch7.1
ORredhatdirectory_serverMatch8.0
ORredhatdirectory_serverMatch8.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | enterprise_linux | 6.0 | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| fedoraproject | 389_directory_server | 1.2.11.15 | cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.15:*:*:*:*:*:*:* |
| redhat | directory_server | * | cpe:2.3:a:redhat:directory_server:*:*:*:*:*:*:*:* |
| redhat | directory_server | 7.1 | cpe:2.3:a:redhat:directory_server:7.1:*:*:*:*:*:*:* |
| redhat | directory_server | 8.0 | cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:* |
| redhat | directory_server | 8.1 | cpe:2.3:a:redhat:directory_server:8.1:*:*:*:*:*:*:* |
Related
redhat
redhat
(RHSA-2013:1753) Important: redhat-ds-base security update
2013-11-21 00:00:00
(RHSA-2013:1752) Important: 389-ds-base security update
2013-11-21 00:00:00
mageia
mageia
Updated 389-ds-base package fixes CVE-2013-4485
2013-12-01 01:31:52
nessus
nessus
Oracle Linux 6 : 389-ds-base (ELSA-2013-1752)
2013-11-27 00:00:00
CentOS 6 : 389-ds-base (CESA-2013:1752)
2014-11-12 00:00:00
Fedora 19 : 389-ds-base-1.3.1.16-1.fc19 (2013-22012)
2013-12-04 00:00:00
openvas
openvas
RedHat Update for 389-ds-base RHSA-2013:1752-01
2013-11-21 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-255)
2015-09-08 00:00:00
Mageia: Security Advisory (MGASA-2013-0357)
2022-01-28 00:00:00
prion
prion
Cross site request forgery (csrf)
2013-11-23 11:55:00
nvd
nvd
CVE-2013-4485
2013-11-23 11:55:04
ubuntucve
ubuntucve
CVE-2013-4485
2013-11-23 00:00:00
debiancve
debiancve
CVE-2013-4485
2013-11-23 11:55:04
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:52:02
fedora
fedora
[SECURITY] Fedora 20 Update: 389-ds-base-1.3.2.7-1.fc20
2013-11-26 04:13:33
[SECURITY] Fedora 19 Update: 389-ds-base-1.3.1.16-1.fc19
2013-12-03 10:31:53
[SECURITY] Fedora 19 Update: 389-ds-base-1.3.1.22-1.fc19
2014-03-15 15:23:08
cvelist
cvelist
CVE-2013-4485
2013-11-23 11:00:00
amazon
amazon
Important: 389-ds-base
2013-12-11 20:32:00
centos
centos
389 security update
2013-11-26 13:37:12
oraclelinux
oraclelinux
389-ds-base security update
2013-11-25 00:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
64.8%
Related for CVE-2013-4485