389-ds-base: denial of service [LWN.net]

Package(s):

389-ds-base

CVE #(s):

CVE-2013-4283

Created:

August 29, 2013

Updated:

September 5, 2013

Description:

From the Red Hat advisory:

It was discovered that the 389 Directory Server did not properly handle the receipt of certain MOD operations with a bogus Distinguished Name (DN). A remote, unauthenticated attacker could use this flaw to cause the 389 Directory Server to crash. (CVE-2013-4283)

Alerts:

Red Hat	RHSA-2013:1182-01	2013-08-28
CentOS	CESA-2013:1182	2013-08-28
Oracle	ELSA-2013-1182	2013-08-28
Scientific Linux	SLSA-2013:1182-1	2013-08-28
Fedora	FEDORA-2013-15518	2013-08-30
Fedora	FEDORA-2013-15540	2013-08-30
Mageia	MGASA-2013-0263	2013-08-30

(Log in to post comments)