CVE-2013-0336

FreeIPA < 3.2.0 - Denial of Service via Missing Username in Connection Request

Title source: llm
STIX 2.1

Description

The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server.

References (6)

Core 6
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=913751
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/58747
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/52763
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/83132

Scores

EPSS 0.0276
EPSS Percentile 84.5%

Details

CWE
CWE-20
Status published
Products (8)
redhat/freeipa 3.0.0
redhat/freeipa 3.0.1
redhat/freeipa 3.0.2
redhat/freeipa 3.1.1
redhat/freeipa 3.1.2
redhat/freeipa 3.1.3
redhat/freeipa 3.1.4
redhat/freeipa < 3.1.5
Published Nov 03, 2014
Tracked Since Feb 18, 2026