PT-2013-5039 · Red Hat+1 · Red Hat Directory Server+3

Publicado

2013-11-21

·

Atualizado

2019-04-22

·

CVE-2013-4485

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions 389 Directory Server version 1.2.11.15 Red Hat Directory Server versions prior to 8.2.11-14
Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash. This can be achieved by including multiple @ characters in a GER attribute list within a search request.
Recommendations For 389 Directory Server version 1.2.11.15, update to a version that includes the necessary patches to prevent the denial of service. For Red Hat Directory Server versions prior to 8.2.11-14, update to version 8.2.11-14 or later to resolve the issue.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2013_1752
CVE-2013-4485
MGASA-2013-0357
RHSA-2013:1752
RHSA-2013:1753
RHSA-2013_1752

Produtos afetados

389 Directory Server
Centos
Red Hat
Red Hat Directory Server