Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-1854 (GCVE-0-2015-1854)
Vulnerability from cvelistv5
- n/a
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T04:54:16.326Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "74392", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/74392" }, { "name": "RHSA-2015:0895", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1428-1] 389-ds-base security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" }, { "name": "FEDORA-2015-7206", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2015-04-07T00:00:00", "descriptions": [ { "lang": "en", "value": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-07-16T09:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "name": "74392", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/74392" }, { "name": "RHSA-2015:0895", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1428-1] 389-ds-base security update", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" }, { "name": "FEDORA-2015-7206", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html" } ] } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2015-1854", "datePublished": "2017-09-19T15:00:00", "dateReserved": "2015-02-17T00:00:00", "dateUpdated": "2024-08-06T04:54:16.326Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2015-1854\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2017-09-19T15:29:00.570\",\"lastModified\":\"2025-04-20T01:37:25.860\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.\"},{\"lang\":\"es\",\"value\":\"389 Directory Server en versiones anteriores a la 1.3.3.10 permite que los atacantes omitan las restricciones de acceso previstas y modifiquen las entradas del directorio mediante una llamada ldapmodrdn manipulada.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.3.3.9\",\"matchCriteriaId\":\"A88381E5-A766-4B31-A978-EE8EEDED48C5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"253C303A-E577-4488-93E6-68A8DD942C38\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]}],\"references\":[{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74392\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2015:0895\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1209573\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74392\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2015:0895\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1209573\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]}]}}" } }
cnvd-2015-02842
Vulnerability from cnvd
Title: Red Hat 389 Directory Server modrdn安全绕过漏洞
Description:
Red Hat 389 Directory Server(前称Fedora Directory Server)是美国红帽(Red Hat)公司的一款企业级的Linux目录服务器。该服务器完全支持LDAPv3规范,具有可扩展、多主复制等特点。
Red Hat 389 Directory Server 1.3.3.10之前版本存在安全绕过漏洞。由于程序处理modrdn操作的授权时存在错误。攻击者可利用该漏洞绕过安全限制,获取受限制功能的使用权限,并操控受限制的条目。
Severity: 中
Patch Name: Red Hat 389 Directory Server modrdn安全绕过漏洞的补丁
Patch Description:
Red Hat 389 Directory Server(前称Fedora Directory Server)是美国红帽(Red Hat)公司的一款企业级的Linux目录服务器。该服务器完全支持LDAPv3规范,具有可扩展、多主复制等特点。
Red Hat 389 Directory Server 1.3.3.10之前版本存在安全绕过漏洞。由于程序处理modrdn操作的授权时存在错误。攻击者可利用该漏洞绕过安全限制,获取受限制功能的使用权限,并操控受限制的条目。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description:
用户可参考如下供应商提供的安全公告获得补丁信息: http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-10.html
Reference: http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-10.html https://bugzilla.redhat.com/show_bug.cgi?id=1209573
Name | Red Hat 389 Directory Server < 1.3.3.10 |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2015-1854" } }, "description": "Red Hat 389 Directory Server\uff08\u524d\u79f0Fedora Directory Server\uff09\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u4f01\u4e1a\u7ea7\u7684Linux\u76ee\u5f55\u670d\u52a1\u5668\u3002\u8be5\u670d\u52a1\u5668\u5b8c\u5168\u652f\u6301LDAPv3\u89c4\u8303\uff0c\u5177\u6709\u53ef\u6269\u5c55\u3001\u591a\u4e3b\u590d\u5236\u7b49\u7279\u70b9\u3002\r\n\r\nRed Hat 389 Directory Server 1.3.3.10\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u5904\u7406modrdn\u64cd\u4f5c\u7684\u6388\u6743\u65f6\u5b58\u5728\u9519\u8bef\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u9650\u5236\uff0c\u83b7\u53d6\u53d7\u9650\u5236\u529f\u80fd\u7684\u4f7f\u7528\u6743\u9650\uff0c\u5e76\u64cd\u63a7\u53d7\u9650\u5236\u7684\u6761\u76ee\u3002", "discovererName": "Red Hat", "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-10.html", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2015-02842", "openTime": "2015-05-04", "patchDescription": "Red Hat 389 Directory Server\uff08\u524d\u79f0Fedora Directory Server\uff09\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u4f01\u4e1a\u7ea7\u7684Linux\u76ee\u5f55\u670d\u52a1\u5668\u3002\u8be5\u670d\u52a1\u5668\u5b8c\u5168\u652f\u6301LDAPv3\u89c4\u8303\uff0c\u5177\u6709\u53ef\u6269\u5c55\u3001\u591a\u4e3b\u590d\u5236\u7b49\u7279\u70b9\u3002 \r\n\r\nRed Hat 389 Directory Server 1.3.3.10\u4e4b\u524d\u7248\u672c\u5b58\u5728\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u5904\u7406modrdn\u64cd\u4f5c\u7684\u6388\u6743\u65f6\u5b58\u5728\u9519\u8bef\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u9650\u5236\uff0c\u83b7\u53d6\u53d7\u9650\u5236\u529f\u80fd\u7684\u4f7f\u7528\u6743\u9650\uff0c\u5e76\u64cd\u63a7\u53d7\u9650\u5236\u7684\u6761\u76ee\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Red Hat 389 Directory Server modrdn\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01", "products": { "product": "Red Hat 389 Directory Server \u003c 1.3.3.10" }, "referenceLink": "http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-10.html \r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1209573", "serverity": "\u4e2d", "submitTime": "2015-04-30", "title": "Red Hat 389 Directory Server modrdn\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e" }
rhsa-2015:0895
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated 389-ds-base packages that fix one security issue are now available \nfor Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.", "title": "Topic" }, { "category": "general", "text": "The 389 Directory Server is an LDAPv3 compliant server. The base packages\ninclude the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nA flaw was found in the way Red Hat Directory Server performed\nauthorization of modrdn operations. An unauthenticated attacker able to\nissue an ldapmodrdn call to the directory server could use this flaw to\nperform unauthorized modifications of entries in the directory server.\n(CVE-2015-1854)\n\nThis issue was discovered by Simo Sorce of Red Hat.\n\nAll 389-ds-base users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue. After installing\nthis update, the 389 server service will be restarted automatically.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0895", "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1209573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0895.json" } ], "title": "Red Hat Security Advisory: 389-ds-base security update", "tracking": { "current_release_date": "2025-09-10T14:06:51+00:00", "generator": { "date": "2025-09-10T14:06:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.7" } }, "id": "RHSA-2015:0895", "initial_release_date": "2015-04-28T18:17:22+00:00", "revision_history": [ { "date": "2015-04-28T18:17:22+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-04-28T18:17:22+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-10T14:06:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.3.1-16.ael7b_1?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product_id": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.ael7b_1?arch=src" } } }, { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product_id": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.el7_1?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.3.1-16.el7_1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Simo Sorce" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2015-1854", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2015-04-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1209573" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server.", "title": "Vulnerability description" }, { "category": "summary", "text": "389-ds-base: access control bypass with modrdn", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the version of 389-ds-base package as shipped with Red Hat Enterprise Linux 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-1854" }, { "category": "external", "summary": "RHBZ#1209573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-1854", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1854" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1854", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1854" } ], "release_date": "2015-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-28T18:17:22+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0895" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0" }, "products": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "389-ds-base: access control bypass with modrdn" } ] }
RHSA-2015:0895
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated 389-ds-base packages that fix one security issue are now available \nfor Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.", "title": "Topic" }, { "category": "general", "text": "The 389 Directory Server is an LDAPv3 compliant server. The base packages\ninclude the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nA flaw was found in the way Red Hat Directory Server performed\nauthorization of modrdn operations. An unauthenticated attacker able to\nissue an ldapmodrdn call to the directory server could use this flaw to\nperform unauthorized modifications of entries in the directory server.\n(CVE-2015-1854)\n\nThis issue was discovered by Simo Sorce of Red Hat.\n\nAll 389-ds-base users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue. After installing\nthis update, the 389 server service will be restarted automatically.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0895", "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1209573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0895.json" } ], "title": "Red Hat Security Advisory: 389-ds-base security update", "tracking": { "current_release_date": "2025-09-10T14:06:51+00:00", "generator": { "date": "2025-09-10T14:06:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.7" } }, "id": "RHSA-2015:0895", "initial_release_date": "2015-04-28T18:17:22+00:00", "revision_history": [ { "date": "2015-04-28T18:17:22+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-04-28T18:17:22+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-10T14:06:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.3.1-16.ael7b_1?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product_id": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.ael7b_1?arch=src" } } }, { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product_id": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.el7_1?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.3.1-16.el7_1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Simo Sorce" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2015-1854", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2015-04-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1209573" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server.", "title": "Vulnerability description" }, { "category": "summary", "text": "389-ds-base: access control bypass with modrdn", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the version of 389-ds-base package as shipped with Red Hat Enterprise Linux 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-1854" }, { "category": "external", "summary": "RHBZ#1209573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-1854", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1854" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1854", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1854" } ], "release_date": "2015-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-28T18:17:22+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0895" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0" }, "products": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "389-ds-base: access control bypass with modrdn" } ] }
rhsa-2015_0895
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated 389-ds-base packages that fix one security issue are now available \nfor Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.", "title": "Topic" }, { "category": "general", "text": "The 389 Directory Server is an LDAPv3 compliant server. The base packages\ninclude the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nA flaw was found in the way Red Hat Directory Server performed\nauthorization of modrdn operations. An unauthenticated attacker able to\nissue an ldapmodrdn call to the directory server could use this flaw to\nperform unauthorized modifications of entries in the directory server.\n(CVE-2015-1854)\n\nThis issue was discovered by Simo Sorce of Red Hat.\n\nAll 389-ds-base users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue. After installing\nthis update, the 389 server service will be restarted automatically.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:0895", "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1209573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0895.json" } ], "title": "Red Hat Security Advisory: 389-ds-base security update", "tracking": { "current_release_date": "2024-11-22T09:06:43+00:00", "generator": { "date": "2024-11-22T09:06:43+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2015:0895", "initial_release_date": "2015-04-28T18:17:22+00:00", "revision_history": [ { "date": "2015-04-28T18:17:22+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-04-28T18:17:22+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T09:06:43+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.3.1-16.ael7b_1?arch=ppc64le" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product_id": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.3.1-16.ael7b_1?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product_id": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.ael7b_1?arch=src" } } }, { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product_id": "389-ds-base-0:1.3.3.1-16.el7_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.el7_1?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-libs@1.3.3.1-16.el7_1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product_id": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/389-ds-base-devel@1.3.3.1-16.el7_1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.ael7b_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.ael7b_1.src", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "relates_to_product_reference": "7Server-optional-LE-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.src", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" }, "product_reference": "389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Simo Sorce" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2015-1854", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2015-04-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1209573" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server.", "title": "Vulnerability description" }, { "category": "summary", "text": "389-ds-base: access control bypass with modrdn", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the version of 389-ds-base package as shipped with Red Hat Enterprise Linux 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-1854" }, { "category": "external", "summary": "RHBZ#1209573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-1854", "url": "https://www.cve.org/CVERecord?id=CVE-2015-1854" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1854", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1854" } ], "release_date": "2015-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-04-28T18:17:22+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:0895" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0" }, "products": [ "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Client-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Client-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7ComputeNode-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7ComputeNode-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Server-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-0:1.3.3.1-16.ael7b_1.src", "7Server-optional-LE-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.ael7b_1.ppc64le", "7Server-optional-LE-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.ael7b_1.ppc64le", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.src", "7Workstation-optional-7.1.Z:389-ds-base-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-debuginfo-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-devel-0:1.3.3.1-16.el7_1.x86_64", "7Workstation-optional-7.1.Z:389-ds-base-libs-0:1.3.3.1-16.el7_1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "389-ds-base: access control bypass with modrdn" } ] }
ghsa-v685-gqm8-hvj7
Vulnerability from github
389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.
{ "affected": [], "aliases": [ "CVE-2015-1854" ], "database_specific": { "cwe_ids": [ "CWE-284" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-09-19T15:29:00Z", "severity": "HIGH" }, "details": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.", "id": "GHSA-v685-gqm8-hvj7", "modified": "2022-05-14T01:09:50Z", "published": "2022-05-14T01:09:50Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1854" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2015-1854" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/74392" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "type": "CVSS_V3" } ] }
fkie_cve-2015-1854
Vulnerability from fkie_nvd
Vendor | Product | Version | |
---|---|---|---|
fedoraproject | 389_directory_server | * | |
fedoraproject | fedora | 22 | |
debian | debian_linux | 8.0 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "A88381E5-A766-4B31-A978-EE8EEDED48C5", "versionEndIncluding": "1.3.3.9", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call." }, { "lang": "es", "value": "389 Directory Server en versiones anteriores a la 1.3.3.10 permite que los atacantes omitan las restricciones de acceso previstas y modifiquen las entradas del directorio mediante una llamada ldapmodrdn manipulada." } ], "id": "CVE-2015-1854", "lastModified": "2025-04-20T01:37:25.860", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2017-09-19T15:29:00.570", "references": [ { "source": "secalert@redhat.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/74392" }, { "source": "secalert@redhat.com", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "source": "secalert@redhat.com", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "source": "secalert@redhat.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/74392" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" } ], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-284" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2015-1854
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2015-1854", "description": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.", "id": "GSD-2015-1854", "references": [ "https://www.suse.com/security/cve/CVE-2015-1854.html", "https://access.redhat.com/errata/RHSA-2015:0895", "https://advisories.mageia.org/CVE-2015-1854.html", "https://alas.aws.amazon.com/cve/html/CVE-2015-1854.html", "https://linux.oracle.com/cve/CVE-2015-1854.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2015-1854" ], "details": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.", "id": "GSD-2015-1854", "modified": "2023-12-13T01:20:05.733416Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-1854", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_affected": "=", "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html", "refsource": "MISC", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html" }, { "name": "http://www.securityfocus.com/bid/74392", "refsource": "MISC", "url": "http://www.securityfocus.com/bid/74392" }, { "name": "https://access.redhat.com/errata/RHSA-2015:0895", "refsource": "MISC", "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "name": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html", "refsource": "MISC", "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.3.3.9", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-1854" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-284" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573", "refsource": "CONFIRM", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1209573" }, { "name": "RHSA-2015:0895", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2015:0895" }, { "name": "74392", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/74392" }, { "name": "FEDORA-2015-7206", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html" }, { "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1428-1] 389-ds-base security update", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2023-02-13T00:47Z", "publishedDate": "2017-09-19T15:29Z" } } }
opensuse-su-2024:10157-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "389-ds-1.3.4.14-1.2 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the 389-ds-1.3.4.14-1.2 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10157", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10157-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8105 page", "url": "https://www.suse.com/security/cve/CVE-2014-8105/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8112 page", "url": "https://www.suse.com/security/cve/CVE-2014-8112/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1854 page", "url": "https://www.suse.com/security/cve/CVE-2015-1854/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3230 page", "url": "https://www.suse.com/security/cve/CVE-2015-3230/" } ], "title": "389-ds-1.3.4.14-1.2 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10157-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "389-ds-1.3.4.14-1.2.aarch64", "product": { "name": "389-ds-1.3.4.14-1.2.aarch64", "product_id": "389-ds-1.3.4.14-1.2.aarch64" } }, { "category": "product_version", "name": "389-ds-devel-1.3.4.14-1.2.aarch64", "product": { "name": "389-ds-devel-1.3.4.14-1.2.aarch64", "product_id": "389-ds-devel-1.3.4.14-1.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "389-ds-1.3.4.14-1.2.ppc64le", "product": { "name": "389-ds-1.3.4.14-1.2.ppc64le", "product_id": "389-ds-1.3.4.14-1.2.ppc64le" } }, { "category": "product_version", "name": "389-ds-devel-1.3.4.14-1.2.ppc64le", "product": { "name": "389-ds-devel-1.3.4.14-1.2.ppc64le", "product_id": "389-ds-devel-1.3.4.14-1.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "389-ds-1.3.4.14-1.2.s390x", "product": { "name": "389-ds-1.3.4.14-1.2.s390x", "product_id": "389-ds-1.3.4.14-1.2.s390x" } }, { "category": "product_version", "name": "389-ds-devel-1.3.4.14-1.2.s390x", "product": { "name": "389-ds-devel-1.3.4.14-1.2.s390x", "product_id": "389-ds-devel-1.3.4.14-1.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "389-ds-1.3.4.14-1.2.x86_64", "product": { "name": "389-ds-1.3.4.14-1.2.x86_64", "product_id": "389-ds-1.3.4.14-1.2.x86_64" } }, { "category": "product_version", "name": "389-ds-devel-1.3.4.14-1.2.x86_64", "product": { "name": "389-ds-devel-1.3.4.14-1.2.x86_64", "product_id": "389-ds-devel-1.3.4.14-1.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "389-ds-1.3.4.14-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64" }, "product_reference": "389-ds-1.3.4.14-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-1.3.4.14-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le" }, "product_reference": "389-ds-1.3.4.14-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-1.3.4.14-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x" }, "product_reference": "389-ds-1.3.4.14-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-1.3.4.14-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64" }, "product_reference": "389-ds-1.3.4.14-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-devel-1.3.4.14-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64" }, "product_reference": "389-ds-devel-1.3.4.14-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-devel-1.3.4.14-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le" }, "product_reference": "389-ds-devel-1.3.4.14-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-devel-1.3.4.14-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x" }, "product_reference": "389-ds-devel-1.3.4.14-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-devel-1.3.4.14-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" }, "product_reference": "389-ds-devel-1.3.4.14-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-8105", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8105" } ], "notes": [ { "category": "general", "text": "389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the \"cn=changelog\" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8105", "url": "https://www.suse.com/security/cve/CVE-2014-8105" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-8105" }, { "cve": "CVE-2014-8112", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-8112" } ], "notes": [ { "category": "general", "text": "389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores \"unhashed\" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-8112", "url": "https://www.suse.com/security/cve/CVE-2014-8112" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2014-8112" }, { "cve": "CVE-2015-1854", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-1854" } ], "notes": [ { "category": "general", "text": "389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-1854", "url": "https://www.suse.com/security/cve/CVE-2015-1854" }, { "category": "external", "summary": "SUSE Bug 929034 for CVE-2015-1854", "url": "https://bugzilla.suse.com/929034" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2015-1854" }, { "cve": "CVE-2015-3230", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2015-3230" } ], "notes": [ { "category": "general", "text": "389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2015-3230", "url": "https://www.suse.com/security/cve/CVE-2015-3230" }, { "category": "external", "summary": "SUSE Bug 934934 for CVE-2015-3230", "url": "https://bugzilla.suse.com/934934" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-1.3.4.14-1.2.x86_64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.aarch64", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.ppc64le", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.s390x", "openSUSE Tumbleweed:389-ds-devel-1.3.4.14-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2015-3230" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.