rhsa-2015_0628
Vulnerability from csaf_redhat
Published
2015-03-05 13:50
Modified
2024-11-22 08:24
Summary
Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Notes

Topic
Updated 389-ds-base packages that fix one security issue, two bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Details
The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. An information disclosure flaw was found in the way the 389 Directory Server stored information in the Changelog that is exposed via the 'cn=changelog' LDAP sub-tree. An unauthenticated user could in certain cases use this flaw to read data from the Changelog, which could include sensitive information such as plain-text passwords. (CVE-2014-8105) This issue was discovered by Petr Špaček of the Red Hat Identity Management Engineering Team. This update also fixes the following bugs: * In multi-master replication (MMR), deleting a single-valued attribute of a Directory Server (DS) entry was previously in some cases not correctly replicated. Consequently, the entry state in the replica systems did not reflect the intended changes. This bug has been fixed and the removal of a single-valued attribute is now properly replicated. (BZ#1179099) * Prior to this update, the Directory Server (DS) always checked the ACI syntax. As a consequence, removing an ACI failed with a syntax error. With this update, the ACI check is stopped when the ACI is going to be removed, and the removal thus works as expected. (BZ#1179100) In addition, this update adds the following enhancement: * The buffer size limit for the 389-ds-base application has been increased to 2MB in order to match the buffer size limit of Simple Authentication and Security Layer (SASL) and Basic Encoding Rules (BER). (BZ#1179595) All 389-ds-base users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add this enhancement. After installing this update, the 389 server service will be restarted automatically.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated 389-ds-base packages that fix one security issue, two bugs, and add\none enhancement are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The 389 Directory Server is an LDAPv3 compliant server. The base packages\ninclude the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nAn information disclosure flaw was found in the way the 389 Directory\nServer stored information in the Changelog that is exposed via the\n\u0027cn=changelog\u0027 LDAP sub-tree. An unauthenticated user could in certain\ncases use this flaw to read data from the Changelog, which could include\nsensitive information such as plain-text passwords. (CVE-2014-8105)\n\nThis issue was discovered by Petr \u0160pa\u010dek of the Red Hat Identity Management\nEngineering Team.\n\nThis update also fixes the following bugs:\n\n* In multi-master replication (MMR), deleting a single-valued attribute of\na Directory Server (DS) entry was previously in some cases not correctly\nreplicated. Consequently, the entry state in the replica systems did not\nreflect the intended changes. This bug has been fixed and the removal of a\nsingle-valued attribute is now properly replicated. (BZ#1179099)\n\n* Prior to this update, the Directory Server (DS) always checked the ACI\nsyntax. As a consequence, removing an ACI failed with a syntax error.\nWith this update, the ACI check is stopped when the ACI is going to be\nremoved, and the removal thus works as expected. (BZ#1179100)\n\nIn addition, this update adds the following enhancement:\n\n* The buffer size limit for the 389-ds-base application has been increased\nto 2MB in order to match the buffer size limit of Simple Authentication and\nSecurity Layer (SASL) and Basic Encoding Rules (BER). (BZ#1179595)\n\nAll 389-ds-base users are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues and add this\nenhancement. After installing this update, the 389 server service will be\nrestarted automatically.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:0628",
        "url": "https://access.redhat.com/errata/RHSA-2015:0628"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1167858",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167858"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0628.json"
      }
    ],
    "title": "Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-22T08:24:39+00:00",
      "generator": {
        "date": "2024-11-22T08:24:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2015:0628",
      "initial_release_date": "2015-03-05T13:50:53+00:00",
      "revision_history": [
        {
          "date": "2015-03-05T13:50:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-03-05T13:50:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T08:24:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                  "product_id": "6Client-optional-6.6.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.6.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.6.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.6.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.6.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                  "product_id": "6Workstation-optional-6.6.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "389-ds-base-0:1.2.11.15-50.el6_6.src",
                "product": {
                  "name": "389-ds-base-0:1.2.11.15-50.el6_6.src",
                  "product_id": "389-ds-base-0:1.2.11.15-50.el6_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base@1.2.11.15-50.el6_6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
                "product": {
                  "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
                  "product_id": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base@1.2.11.15-50.el6_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
                "product": {
                  "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
                  "product_id": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base-libs@1.2.11.15-50.el6_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
                "product": {
                  "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
                  "product_id": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.2.11.15-50.el6_6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
                "product": {
                  "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
                  "product_id": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base-devel@1.2.11.15-50.el6_6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
                "product": {
                  "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
                  "product_id": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base@1.2.11.15-50.el6_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
                "product": {
                  "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
                  "product_id": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base-libs@1.2.11.15-50.el6_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
                "product": {
                  "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
                  "product_id": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.2.11.15-50.el6_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
                "product": {
                  "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
                  "product_id": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/389-ds-base-devel@1.2.11.15-50.el6_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.src",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Client-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.src",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.src",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.src",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.src",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
        },
        "product_reference": "389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.6.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Petr \u0160pa\u010dek"
          ],
          "organization": "Red Hat Identity Management Engineering Team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2014-8105",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2014-11-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1167858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information disclosure flaw was found in the way the 389 Directory Server stored information in the Changelog that is exposed via the \u0027cn=changelog\u0027 LDAP sub-tree. An unauthenticated user could in certain cases use this flaw to read data from the Changelog, which could include sensitive information such as plain-text passwords.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "389-ds-base: information disclosure through \u0027cn=changelog\u0027 subtree",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
          "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
          "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
          "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
          "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
          "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
          "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
          "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
          "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
          "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
          "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
          "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
          "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
          "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
          "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
          "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
          "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
          "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
          "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
          "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
          "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
          "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
          "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
          "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
          "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
          "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
          "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
          "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
          "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
          "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
          "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
          "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
          "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-8105"
        },
        {
          "category": "external",
          "summary": "RHBZ#1167858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1167858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8105",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-8105"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8105",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8105"
        }
      ],
      "release_date": "2015-03-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-03-05T13:50:53+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0628"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Client-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Client-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6ComputeNode-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6ComputeNode-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Server-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Server-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Server-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Server-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Workstation-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.src",
            "6Workstation-optional-6.6.z:389-ds-base-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-debuginfo-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-devel-0:1.2.11.15-50.el6_6.x86_64",
            "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.i686",
            "6Workstation-optional-6.6.z:389-ds-base-libs-0:1.2.11.15-50.el6_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "389-ds-base: information disclosure through \u0027cn=changelog\u0027 subtree"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.