Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0418-1

Опубликовано: 16 мар. 2021
Источник: suse-cvrf

Описание

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • 389-ds was updated to version 1.4.3.19
    • CVE-2020-35518: Fixed an information disclosure during the binding of a DN (bsc#1181159).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Список пакетов

openSUSE Leap 15.2
389-ds-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
389-ds-devel-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
389-ds-snmp-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
lib389-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
libsvrcore0-1.4.3.19~git0.bef0b5bed-lp152.2.12.1

Ссылки

Описание

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

Затронутые продукты
openSUSE Leap 15.2:389-ds-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
openSUSE Leap 15.2:389-ds-devel-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
openSUSE Leap 15.2:389-ds-snmp-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
openSUSE Leap 15.2:lib389-1.4.3.19~git0.bef0b5bed-lp152.2.12.1
Ссылки