The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3401 advisory.

  - 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default     (CVE-2018-10871)

  - 389-ds-base: using dscreate in verbose mode results in information disclosure (CVE-2019-10224)

  - 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)

  - 389-ds-base: DoS via hanging secured connections (CVE-2019-3883)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was found that the fix for CVE-2018-14648 in     389-ds-base, versions 1.4.0.x before 1.4.0.17, was     incorrectly applied in RHEL 7.5. An attacker would     still be able to provoke excessive CPU consumption     leading to a denial of service.(CVE-2019-10171)

  - A flaw was found in the 'deref' plugin of 389-ds-base     where it could use the 'search' permission to display     attribute values. In some configurations, this could     allow an authenticated attacker to view private     attributes, such as password hashes.(CVE-2019-14824)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has 389-ds-base packages installed that are affected by a vulnerability:

  - A flaw was found in the 'deref' plugin of 389-ds-base     where it could use the 'search' permission to display     attribute values. In some configurations, this could     allow an authenticated attacker to view private     attributes, such as password hashes. (CVE-2019-14824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3401 advisory.

  - In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited     by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted     requests. Connections using SSL/TLS are not taking this timeout into account during reads, and may hang     longer.An unauthenticated attacker could repeatedly create hanging LDAP requests to hang all the workers,     resulting in a Denial of Service. (CVE-2019-3883)

  - A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to     display attribute values. In some configurations, this could allow an authenticated attacker to view     private attributes, such as password hashes. (CVE-2019-14824)

  - 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive     Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores     passwords in plaintext format in their respective changelog files. An attacker with sufficiently high     privileges, such as root or Directory Manager, can query these files in order to retrieve plaintext     passwords. (CVE-2018-10871)

  - A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the     dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An     attacker, able to see the screen or record the terminal standard error output, could use this flaw to gain     sensitive information. (CVE-2019-10224)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3401 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    The following packages have been upgraded to a later upstream version: 389-ds-base (1.4.1.3). (BZ#1712467)

    Security Fix(es):

    * 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)

    * 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default     (CVE-2018-10871)

    * 389-ds-base: DoS via hanging secured connections (CVE-2019-3883)

    * 389-ds-base: using dscreate in verbose mode results in information disclosure (CVE-2019-10224)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3981 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * DB Deadlock on modrdn appears to corrupt database and entry cache (BZ#1749289)

    * After audit log file is rotated, DS version string is logged after each update (BZ#1754831)

    * Extremely slow LDIF import with ldif2db (BZ#1763622)

    * ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex     (BZ#1763627)

    * CleanAllRUV task limit not enforced (BZ#1767622)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to     display attribute values. In some configurations, this could allow an authenticated attacker to view     private attributes, such as password hashes. (CVE-2019-14824)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has 389-ds-base packages installed that are affected by a vulnerability:

  - A flaw was found in the 'deref' plugin of 389-ds-base     where it could use the 'search' permission to display     attribute values. In some configurations, this could     allow an authenticated attacker to view private     attributes, such as password hashes. (CVE-2019-14824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3399 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3399-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Anton Gladky     April 24, 2023                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : 389-ds-base     Version        : 1.4.0.21-1+deb10u1     CVE ID         : CVE-2019-3883 CVE-2019-10224 CVE-2019-14824 CVE-2021-3514                      CVE-2021-3652 CVE-2021-4091 CVE-2022-0918 CVE-2022-0996                      CVE-2022-2850

    Multiple security issues were discovered in 389-ds-base: an open source LDAP     server for Linux.

    CVE-2019-3883

        SSL/TLS requests do not enforce ioblocktimeout limit, leading to DoS         vulnerability by hanging all workers with hanging LDAP requests.

    CVE-2019-10224

        The vulnerability may disclose sensitive information, such as the Directory         Manager password, when the dscreate and dsconf commands are executed in         verbose mode. An attacker who can view the screen or capture the terminal         standard error output can exploit thisvulnerability to obtain confidential information.

    CVE-2019-14824

        The 'deref' plugin of 389-ds-base has a vulnerability that enables it to         disclose attribute values using the 'search' permission. In certain setups,         an authenticated attacker can exploit this flaw to access confidential         attributes, including password hashes.

    CVE-2021-3514

        If a sync_repl client is used, an authenticated attacker can trigger a crash         by exploiting a specially crafted query that leads to a NULL pointer         dereference.

    CVE-2021-3652

        Importing an asterisk as password hashes enables successful authentication         with any password, allowing attackers to access accounts with disabled         passwords.

    CVE-2021-4091

        A double free was found in the way 389-ds-base handles virtual attributes         context in persistent searches. An attacker could send a series of search         requests, forcing the server to behave unexpectedly, and crash.

    CVE-2022-0918

        An unauthenticated attacker with network access to the LDAP port can cause a         denial of service. The denial of service is triggered by a single message         sent over a TCP connection, no bind or other authentication is required. The         message triggers a segmentation fault that results in slapd crashing.

    CVE-2022-0996

        Expired password was still allowed to access the database. A user whose         password was expired was still allowed to access the database as if the         password was not expired.  Once a password is expired, and grace logins         have been used up, the account is basically supposed to be locked out and         should not be allowed to perform any privileged action.

    CVE-2022-2850

        The vulnerability in content synchronization plugin enables an authenticated attacker to trigger a     denial of service via a crafted query through a NULL         pointer dereference.

    For Debian 10 buster, these problems have been fixed in version     1.4.0.21-1+deb10u1.

    We recommend that you upgrade your 389-ds-base packages.

    For the detailed security status of 389-ds-base please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/389-ds-base

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
145664	CentOS 8 : 389-ds:1.4 (CESA-2019:3401)	Nessus	CentOS Local Security Checks	2021/1/29	2023/2/8	high
144229	EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2020-2539)	Nessus	Huawei Local Security Checks	2020/12/15	2021/1/6	medium
132437	NewStart CGSL CORE 5.04 / MAIN 5.04 : 389-ds-base Vulnerability (NS-SA-2019-0261)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2021/1/14	medium
180753	Oracle Linux 8 : 389-ds:1.4 (ELSA-2019-3401)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	high
130535	RHEL 8 : 389-ds:1.4 (RHSA-2019:3401)	Nessus	Red Hat Local Security Checks	2019/11/6	2024/11/6	high
131380	RHEL 7 : 389-ds-base (RHSA-2019:3981)	Nessus	Red Hat Local Security Checks	2019/11/27	2024/11/6	medium
251642	Linux Distros Unpatched Vulnerability : CVE-2019-14824	Nessus	Misc.	2025/8/18	2026/7/12	medium
145099	EulerOS 2.0 SP3 : 389-ds-base (EulerOS-SA-2021-1058)	Nessus	Huawei Local Security Checks	2021/1/20	2021/1/22	medium
133070	NewStart CGSL CORE 5.05 / MAIN 5.05 : 389-ds-base Vulnerability (NS-SA-2020-0003)	Nessus	NewStart CGSL Local Security Checks	2020/1/20	2021/1/14	medium
174722	Debian dla-3399 : 389-ds - security update	Nessus	Debian Local Security Checks	2023/4/25	2025/1/22	medium

检测

插件搜索

high

medium

medium

high

high

medium

medium

medium

medium

medium