Improper input validation in Fedoraproject 389 Directory Server
CVE-2013-4485
389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.020 (78.6th percentile) — read the EPSS interpretation.
Affected products
- Fedoraproject 389_directory_server — versions 1.2.11.15
- Redhat Directory_server — versions 7.1, 8.0, 8.1
- Redhat Enterprise_linux — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)