CVE-2012-0833

Опубликовано: 03 июл. 2012

Источник: nvd

CVSS2: 2.3

EPSS Низкий

Описание

The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.

Ссылки

http://rhn.redhat.com/errata/RHSA-2012-0813.html
http://secunia.com/advisories/48035
Vendor Advisory
http://secunia.com/advisories/49562
Vendor Advisory
https://fedorahosted.org/389/changeset/1bbbb3e5049c1aa0650546efab87ed2f1ea59637/389-ds-base
Exploit
Patch
https://fedorahosted.org/389/ticket/162
http://rhn.redhat.com/errata/RHSA-2012-0813.html
http://secunia.com/advisories/48035
Vendor Advisory
http://secunia.com/advisories/49562
Vendor Advisory
https://fedorahosted.org/389/changeset/1bbbb3e5049c1aa0650546efab87ed2f1ea59637/389-ds-base
Exploit
Patch
https://fedorahosted.org/389/ticket/162

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fedoraproject:389_directory_server:*:rc1:*:*:*:*:*:*

Версия до 1.2.10 (включая)

cpe:2.3:a:fedoraproject:389_directory_server:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc4:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a4:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc6:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc7:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.7:alpha3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.7.5:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:alpha1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:alpha2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:alpha3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:rc1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:rc2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.9.9:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10:alpha8:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00244

Низкий

2.3 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2012-0833

ubuntu

около 13 лет назад

CVE-2012-0833

redhat

больше 13 лет назад

CVE-2012-0833

debian

около 13 лет назад

The acllas__handle_group_entry function in servers/plugins/acl/acllas. ...

GHSA-29ch-37gp-6r87

github

больше 3 лет назад

ELSA-2012-0813

oracle-oval

около 13 лет назад

ELSA-2012-0813: 389-ds-base security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 48%

0.00244

Низкий

2.3 Low

CVSS2

Дефекты

CWE-264