CVE-2013-0312

389 Directory Server < 1.3.0.4 - Denial of Service via Zero-Length LDAP Control Sequence

Title source: llm
STIX 2.1

Description

389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.

References (7)

Core 7
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0628.html
Third Party Advisory x_refsource_confirm
http://directory.fedoraproject.org/wiki/Releases/1.3.0.4
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/52568
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=912964
Various Sources x_refsource_misc
https://fedorahosted.org/389/ticket/571
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/58428
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/52279

Scores

EPSS 0.0273
EPSS Percentile 84.5%

Details

CWE
CWE-189
Status published
Products (1)
fedoraproject/389_directory_server < 1.3.0.3
Published Mar 13, 2013
Tracked Since Feb 18, 2026