Skip to main content

389 Directory Server CVE-2013-4283

MEDIUM
Improper Input Validation (CWE-20)
2013-09-10 secalert@redhat.com
5.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:P
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
P

Lifecycle Timeline

1
CVE Published
Sep 10, 2013 - 19:55 cve.org
MEDIUM 5.0

DescriptionCVE.org

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.

AnalysisAI

ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-20. ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request. Affected products include: Fedoraproject 389 Directory Server. Version information: before 1.3.0.8.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2017-7551 CRITICAL POC
9.8 Aug 16

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout du

CVE-2018-14624 HIGH POC
7.5 Sep 06

A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. Rated high severity (CVSS

CVE-2014-0132 MEDIUM POC
6.5 Mar 18

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to conn

CVE-2022-0996 MEDIUM POC
6.5 Mar 23

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause impr

CVE-2016-0741 HIGH
7.5 Apr 19

slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attac

CVE-2015-1854 HIGH
7.5 Sep 19

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entrie

CVE-2015-3230 HIGH
7.5 Oct 29

389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference wh

CVE-2026-9064 HIGH
7.5 May 20

Denial of service in 389-ds-base LDAP server allows remote unauthenticated attackers to exhaust CPU and heap memory by s

CVE-2022-1949 HIGH
7.5 Jun 02

An access control bypass vulnerability found in 389-ds-base. Rated high severity (CVSS 7.5), this vulnerability is remot

CVE-2019-10171 HIGH
7.5 Aug 02

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied i

CVE-2019-3883 HIGH
7.5 Apr 17

In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Rated high severity (CVSS 7.5), this vuln

CVE-2018-14648 HIGH
7.5 Sep 28

A flaw was found in 389 Directory Server. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no

Share

CVE-2013-4283 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy