CVE-2012-4450
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
74.7%
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fedoraproject | 389_directory_server | 1.2.10 | cpe:2.3:a:fedoraproject:389_directory_server:1.2.10:*:*:*:*:*:*:* |
References
git.fedorahosted.org/cgit/389/ds.git/commit/?id=5beb93d42efb807838c09c5fab898876876f8d09
rhn.redhat.com/errata/RHSA-2013-0503.html
secunia.com/advisories/50713
www.openwall.com/lists/oss-security/2012/09/26/3
www.openwall.com/lists/oss-security/2012/09/26/5
www.securityfocus.com/bid/55690
bugzilla.redhat.com/show_bug.cgi?id=860772
fedorahosted.org/389/ticket/340
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
74.7%