Vulnerabilities > Redhat > Directory Server > 8
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2013-11-23 | CVE-2013-4485 | Improper Input Validation vulnerability in multiple products 389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request. | 4.0 |
2013-07-31 | CVE-2013-2219 | Permissions, Privileges, and Access Controls vulnerability in multiple products The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute. | 4.0 |
2012-07-03 | CVE-2012-2746 | Cryptographic Issues vulnerability in multiple products 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password. | 2.1 |
2012-07-03 | CVE-2012-2678 | Cryptographic Issues vulnerability in multiple products 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute. | 1.2 |
2008-04-16 | CVE-2008-0892 | Improper Input Validation vulnerability in Redhat Directory Server and Fedora Directory Server The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands. | 9.0 |