An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server.
The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es) :

* 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) :

* DB Deadlock on modrdn appears to corrupt database and entry cache (BZ# 1749289)

* After audit log file is rotated, DS version string is logged after each update (BZ#1754831)

* Extremely slow LDIF import with ldif2db (BZ#1763622)

* ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex (BZ#1763627)

* CleanAllRUV task limit not enforced (BZ#1767622)

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server.
The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es) :

* 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) :

* DB Deadlock on modrdn appears to corrupt database and entry cache (BZ# 1749289)

* After audit log file is rotated, DS version string is logged after each update (BZ#1754831)

* Extremely slow LDIF import with ldif2db (BZ#1763622)

* ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex (BZ#1763627)

* CleanAllRUV task limit not enforced (BZ#1767622)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of 389-ds-base installed on the remote host is prior to 1.3.9.1-12.65. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1334 advisory.

    389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive     Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores     passwords in plaintext format in their respective changelog files. An attacker with sufficiently high     privileges, such as root or Directory Manager, can query these files in order to retrieve plaintext     passwords.(CVE-2018-10871)

    A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the     dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An     attacker, able to see the screen or record the terminal standard error output, could use this flaw to gain     sensitive information.(CVE-2019-10224)

    A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to     display attribute values. In some configurations, this could allow an authenticated attacker to view     private attributes, such as password hashes.(CVE-2019-14824)

    In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited     by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted     requests. Connections using SSL/TLS are not taking this timeout into account during reads, and may hang     longer.An unauthenticated attacker could repeatedly create hanging LDAP requests to hang all the workers,     resulting in a Denial of Service.(CVE-2019-3883)

    It was found that encrypted connections did not honor the 'ioblocktimeout' parameter to end blocking     requests. As a result, an unauthenticated attacker could repeatedly start a sufficient number of encrypted     connections to block all workers, resulting in a denial of service.(CVE-2019-3883)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of 389-ds-base installed on the remote host is prior to 1.3.9.1-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1381 advisory.

    A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to     display attribute values. In some configurations, this could allow an authenticated attacker to view     private attributes, such as password hashes. (CVE-2019-14824)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0464 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values.

In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

For Debian 8 'Jessie', this problem has been fixed in version 1.3.3.5-4+deb8u7.

We recommend that you upgrade your 389-ds-base packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3981 advisory.

    - Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref     plugin

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has 389-ds-base packages installed that are affected by a vulnerability:

  - A flaw was found in the 'deref' plugin of 389-ds-base     where it could use the 'search' permission to display     attribute values. In some configurations, this could     allow an authenticated attacker to view private     attributes, such as password hashes. (CVE-2019-14824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was found that the fix for CVE-2018-14648 in     389-ds-base, versions 1.4.0.x before 1.4.0.17, was     incorrectly applied in RHEL 7.5. An attacker would     still be able to provoke excessive CPU consumption     leading to a denial of service.(CVE-2019-10171)

  - A flaw was found in the 'deref' plugin of 389-ds-base     where it could use the 'search' permission to display     attribute values. In some configurations, this could     allow an authenticated attacker to view private     attributes, such as password hashes.(CVE-2019-14824)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3399 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3399-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Anton Gladky     April 24, 2023                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : 389-ds-base     Version        : 1.4.0.21-1+deb10u1     CVE ID         : CVE-2019-3883 CVE-2019-10224 CVE-2019-14824 CVE-2021-3514                      CVE-2021-3652 CVE-2021-4091 CVE-2022-0918 CVE-2022-0996                      CVE-2022-2850

    Multiple security issues were discovered in 389-ds-base: an open source LDAP     server for Linux.

    CVE-2019-3883

        SSL/TLS requests do not enforce ioblocktimeout limit, leading to DoS         vulnerability by hanging all workers with hanging LDAP requests.

    CVE-2019-10224

        The vulnerability may disclose sensitive information, such as the Directory         Manager password, when the dscreate and dsconf commands are executed in         verbose mode. An attacker who can view the screen or capture the terminal         standard error output can exploit thisvulnerability to obtain confidential information.

    CVE-2019-14824

        The 'deref' plugin of 389-ds-base has a vulnerability that enables it to         disclose attribute values using the 'search' permission. In certain setups,         an authenticated attacker can exploit this flaw to access confidential         attributes, including password hashes.

    CVE-2021-3514

        If a sync_repl client is used, an authenticated attacker can trigger a crash         by exploiting a specially crafted query that leads to a NULL pointer         dereference.

    CVE-2021-3652

        Importing an asterisk as password hashes enables successful authentication         with any password, allowing attackers to access accounts with disabled         passwords.

    CVE-2021-4091

        A double free was found in the way 389-ds-base handles virtual attributes         context in persistent searches. An attacker could send a series of search         requests, forcing the server to behave unexpectedly, and crash.

    CVE-2022-0918

        An unauthenticated attacker with network access to the LDAP port can cause a         denial of service. The denial of service is triggered by a single message         sent over a TCP connection, no bind or other authentication is required. The         message triggers a segmentation fault that results in slapd crashing.

    CVE-2022-0996

        Expired password was still allowed to access the database. A user whose         password was expired was still allowed to access the database as if the         password was not expired.  Once a password is expired, and grace logins         have been used up, the account is basically supposed to be locked out and         should not be allowed to perform any privileged action.

    CVE-2022-2850

        The vulnerability in content synchronization plugin enables an authenticated attacker to trigger a     denial of service via a crafted query through a NULL         pointer dereference.

    For Debian 10 buster, these problems have been fixed in version     1.4.0.21-1+deb10u1.

    We recommend that you upgrade your 389-ds-base packages.

    For the detailed security status of 389-ds-base please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/389-ds-base

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
131572	CentOS 7 : 389-ds-base (CESA-2019:3981)	Nessus	CentOS Local Security Checks	2019/12/4	2019/12/31	medium
131724	Virtuozzo 7 : 389-ds-base / 389-ds-base-devel / 389-ds-base-libs / etc (VZLSA-2019-3981)	Nessus	Virtuozzo Local Security Checks	2019/12/5	2024/4/5	medium
133004	Amazon Linux AMI : 389-ds-base (ALAS-2020-1334)	Nessus	Amazon Linux Local Security Checks	2020/1/17	2024/12/11	high
133092	Amazon Linux 2 : 389-ds-base (ALAS-2020-1381)	Nessus	Amazon Linux Local Security Checks	2020/1/21	2024/12/11	medium
133633	RHEL 8 : 389-ds:1.4 (RHSA-2020:0464)	Nessus	Red Hat Local Security Checks	2020/2/12	2024/11/7	medium
131429	Debian DLA-2004-1 : 389-ds-base security update	Nessus	Debian Local Security Checks	2019/12/3	2024/4/9	medium
131520	Oracle Linux 7 : 389-ds-base (ELSA-2019-3981)	Nessus	Oracle Linux Local Security Checks	2019/12/3	2024/10/22	medium
133070	NewStart CGSL CORE 5.05 / MAIN 5.05 : 389-ds-base Vulnerability (NS-SA-2020-0003)	Nessus	NewStart CGSL Local Security Checks	2020/1/20	2021/1/14	medium
145099	EulerOS 2.0 SP3 : 389-ds-base (EulerOS-SA-2021-1058)	Nessus	Huawei Local Security Checks	2021/1/20	2021/1/22	medium
174722	Debian dla-3399 : 389-ds - security update	Nessus	Debian Local Security Checks	2023/4/25	2025/1/22	medium

检测

插件搜索

medium

medium

high

medium

medium

medium

medium

medium

medium

medium