CVE-2016-4992

Synopsis Moderate: 389-ds-base security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Sc ...

Synopsis Moderate: 389-ds-base security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Sc ...

CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attackIt was found that 389 Directory Server was vulnerable to a remote password disclosure via timing attack A remote attacker could possibly use this flaw to retrieve directory server password after many tries CVE-2016-5416 389-ds-base: ACI readable by anonymous userIt was fo ...

An information disclosure flaw was found in 389 Directory Server A user with no access to objects in certain LDAP sub-tree could send LDAP ADD operations with a specific object name The error message returned to the user was different based on whether the target object existed or not ...