/[advisories]/10138.adv
ViewVC logotype

Annotation of /10138.adv

Parent Directory Parent Directory | Revision Log Revision Log


Revision 336 - (hide annotations) (download)
Fri Aug 16 03:15:13 2013 UTC (5 years, 10 months ago) by davidwhodgins
File size: 885 byte(s)
Adding security advisory for 389-ds-base mga#10138
1 davidwhodgins 336 type: security
2     subject: Updated 389-ds-base package fixes security vulnerability
3     CVE:
4     - CVE-2013-2219
5     src:
6     3:
7     core:
8     - 389-ds-base-1.3.0.5-2.2.mga3
9     description: |
10     It was discovered that the 389 Directory Server did not honor defined
11     attribute access controls when evaluating search filter expressions. A
12     remote attacker (with permission to query the Directory Server) could use
13     this flaw to determine the values of restricted attributes via a series of
14     search queries with filter conditions that used restricted attributes
15     (CVE-2013-2219).
16    
17     Additionally, problems of wrong default group nobody (from upstream) as well
18     as the 389-ds server not starting after a reboot have been fixed (mga#10138).
19     references:
20     - https://bugs.mageia.org/show_bug.cgi?id=10138
21     - https://bugs.mageia.org/show_bug.cgi?id=10889
22     - https://rhn.redhat.com/errata/RHSA-2013-1119.html

  ViewVC Help
Powered by ViewVC 1.1.26