Updated 389-ds-base packages fix security vulnerability

2014-08-1813:14:56

Gentoo Foundation

advisories.mageia.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.3%

JSON

It was found that when replication was enabled for each attribute in 389 Directory Server, which is the default configuration, the server returned replicated metadata when the directory was searched while debugging was enabled. A remote attacker could use this flaw to disclose potentially sensitive information (CVE-2014-3562). The 389-ds-base package has been updated to version 1.3.2.22, fixing this issue and other bugs.

OSVersionArchitecturePackageVersionFilename
Mageia3noarch389-ds-base< 1.3.2.22-1389-ds-base-1.3.2.22-1.mga3
Mageia4noarch389-ds-base< 1.3.2.22-1389-ds-base-1.3.2.22-1.mga4