CVE-2014-3562

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
VendorProductVersion
fedoraproject389_directory_server
1.2.1
fedoraproject389_directory_server
1.2.2
fedoraproject389_directory_server
1.2.3
fedoraproject389_directory_server
1.2.5
fedoraproject389_directory_server
1.2.5:rc1
fedoraproject389_directory_server
1.2.5:rc2
fedoraproject389_directory_server
1.2.5:rc3
fedoraproject389_directory_server
1.2.5:rc4
fedoraproject389_directory_server
1.2.6
fedoraproject389_directory_server
1.2.6:a2
fedoraproject389_directory_server
1.2.6:a3
fedoraproject389_directory_server
1.2.6:a4
fedoraproject389_directory_server
1.2.6:rc1
fedoraproject389_directory_server
1.2.6:rc2
fedoraproject389_directory_server
1.2.6:rc3
fedoraproject389_directory_server
1.2.6:rc6
fedoraproject389_directory_server
1.2.6:rc7
fedoraproject389_directory_server
1.2.6.1
fedoraproject389_directory_server
1.2.7:alpha3
fedoraproject389_directory_server
1.2.7.5
fedoraproject389_directory_server
1.2.8:alpha1
fedoraproject389_directory_server
1.2.8:alpha2
fedoraproject389_directory_server
1.2.8:alpha3
fedoraproject389_directory_server
1.2.8:rc1
fedoraproject389_directory_server
1.2.8:rc2
fedoraproject389_directory_server
1.2.8.1
fedoraproject389_directory_server
1.2.8.2
fedoraproject389_directory_server
1.2.8.3
fedoraproject389_directory_server
1.2.9.9
fedoraproject389_directory_server
1.2.10
fedoraproject389_directory_server
1.2.10:alpha8
fedoraproject389_directory_server
1.2.10:rc1
fedoraproject389_directory_server
1.2.10.2
fedoraproject389_directory_server
1.2.10.3
fedoraproject389_directory_server
1.2.10.4
fedoraproject389_directory_server
1.2.10.11
fedoraproject389_directory_server
1.2.11.1
fedoraproject389_directory_server
1.2.11.5
fedoraproject389_directory_server
1.2.11.6
fedoraproject389_directory_server
1.2.11.8
fedoraproject389_directory_server
1.2.11.9
fedoraproject389_directory_server
1.2.11.10
fedoraproject389_directory_server
1.2.11.11
fedoraproject389_directory_server
1.2.11.12
fedoraproject389_directory_server
1.2.11.13
fedoraproject389_directory_server
1.2.11.14
fedoraproject389_directory_server
1.2.11.15
fedoraproject389_directory_server
1.2.11.17
fedoraproject389_directory_server
1.2.11.19
fedoraproject389_directory_server
1.2.11.20
fedoraproject389_directory_server
1.2.11.21
fedoraproject389_directory_server
1.2.11.22
fedoraproject389_directory_server
1.2.11.23
fedoraproject389_directory_server
1.2.11.25
fedoraproject389_directory_server
1.2.11.26
fedoraproject389_directory_server
1.3.0.2
fedoraproject389_directory_server
1.3.0.3
fedoraproject389_directory_server
1.3.0.4
fedoraproject389_directory_server
1.3.0.5
fedoraproject389_directory_server
1.3.0.6
fedoraproject389_directory_server
1.3.0.7
fedoraproject389_directory_server
1.3.0.8
redhatdirectory_server
8.0
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
389-ds-base
bullseye
1.4.4.11-2
fixed
bookworm
2.3.1+dfsg1-1
fixed
sid
3.1.1+dfsg1-2
fixed
trixie
3.1.1+dfsg1-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
389-ds-base
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
ignored
vivid
ignored
utopic
ignored
trusty
dne
precise
ignored
lucid
dne
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2014-1031.html
http://rhn.redhat.com/errata/RHSA-2014-1032.html
https://bugzilla.redhat.com/show_bug.cgi?id=1123477
http://rhn.redhat.com/errata/RHSA-2014-1031.html
http://rhn.redhat.com/errata/RHSA-2014-1032.html
https://bugzilla.redhat.com/show_bug.cgi?id=1123477