PT-2014-1863 · Red Hat+1 · 389-Ds-Base-Libs+5

Published 2014-08-07 · Updated 2023-02-13 · CVE-2014-3562

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions 389-ds-base versions 1.3.1.6 389-ds-base-debuginfo versions 1.3.1.6 389-ds-base-devel versions 1.3.1.6 389-ds-base-libs versions 1.3.1.6

Description The issue allows remote attackers to obtain sensitive replicated metadata by searching the directory, potentially leading to a breach of protected information. This can be exploited remotely.

Recommendations For 389-ds-base version 1.3.1.6, consider disabling the debugging feature to prevent exploitation until a patch is available. For 389-ds-base-debuginfo version 1.3.1.6, consider disabling the debugging feature to prevent exploitation until a patch is available. For 389-ds-base-devel version 1.3.1.6, consider disabling the debugging feature to prevent exploitation until a patch is available. For 389-ds-base-libs version 1.3.1.6, consider disabling the debugging feature to prevent exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-07106

BDU:2015-07107

BDU:2015-07108

BDU:2015-07109

BDU:2015-09138

BDU:2015-09139

BDU:2015-09140

BDU:2015-09141

CESA-2014_1031

CVE-2014-3562

MGASA-2014-0333

RHSA-2014:1031

RHSA-2014:1032

RHSA-2014_1031

Affected Products

389-Ds-Base

389-Ds-Base-Debuginfo

389-Ds-Base-Devel

389-Ds-Base-Libs

Centos

Red Hat

References · 35

• https://osv.dev/vulnerability/MGASA-2014-0333 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2014-1031.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-3562 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3562 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07109 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-1032.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-3562 · Security Note
• https://bdu.fstec.ru/vul/2015-09141 · Security Note
• https://bdu.fstec.ru/vul/2015-07106 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-3562 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0333.html · Security Note
• https://bdu.fstec.ru/vul/2015-09140 · Security Note
• https://bdu.fstec.ru/vul/2015-07108 · Security Note
• https://bdu.fstec.ru/vul/2015-09138 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3562 · Security Note