CVE-2014-8112

Related Files

Red Hat Security Advisory 2015-0416-02

Posted Mar 5, 2015

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-0416-02 - The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol server and command-line utilities for server administration. An information disclosure flaw was found in the way the 389 Directory Server stored information in the Changelog that is exposed via the 'cn=changelog' LDAP sub-tree. An unauthenticated user could in certain cases use this flaw to read data from the Changelog, which could include sensitive information such as plain-text passwords.

tags | advisory, protocol, info disclosure

systems | linux, redhat

advisories | CVE-2014-8105, CVE-2014-8112

SHA-256 | 76eb8d2678ea35214cc2b6dc75f20467670b3bbe6c447c60435db6da9f142be7

Download | Favorite | View