CVE-2014-0132

Опубликовано: 18 мар. 2014

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.

Ссылки

http://rhn.redhat.com/errata/RHSA-2014-0292.html
http://secunia.com/advisories/57412
Vendor Advisory
http://secunia.com/advisories/57427
Vendor Advisory
https://fedorahosted.org/389/changeset/76acff12a86110d4165f94e2cba13ef5c7ebc38a/
Exploit
https://fedorahosted.org/389/ticket/47739
Patch
http://rhn.redhat.com/errata/RHSA-2014-0292.html
http://secunia.com/advisories/57412
Vendor Advisory
http://secunia.com/advisories/57427
Vendor Advisory
https://fedorahosted.org/389/changeset/76acff12a86110d4165f94e2cba13ef5c7ebc38a/
Exploit
https://fedorahosted.org/389/ticket/47739
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*

Версия до 1.2.11.25 (включая)

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.5:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.6:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.8:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.9:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.10:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.11:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.12:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.13:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.14:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.15:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.17:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.19:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.20:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.21:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.22:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.23:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00573

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2014-0132

ubuntu

больше 11 лет назад

CVE-2014-0132

redhat

больше 11 лет назад

CVE-2014-0132

debian

больше 11 лет назад

The SASL authentication functionality in 389 Directory Server before 1 ...

GHSA-3483-6grv-x2wh

github

больше 3 лет назад

ELSA-2014-0292

oracle-oval

больше 11 лет назад

ELSA-2014-0292: 389-ds-base security update (IMPORTANT)

EPSS

Процентиль: 68%

0.00573

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-287