CVE-2024-6237

all versions

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while se

6.5MEDIUM

CVE-2024-1062

all versions

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars

5.5MEDIUM

CVE-2023-1055

all versions

A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the use

5.5MEDIUM

CVE-2022-2850

all versions

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointe

6.5MEDIUM

CVE-2022-1949

all versions

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, bu

7.5HIGH

CVE-2020-35518

all versions

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This c

5.3MEDIUM

CVE-2010-3282

all versions

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit lo

3.3LOW

CVE-2010-2222

all versions

The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of s

7.5HIGH

CVE-2014-3562

all versions

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replic

CVE-2013-4485

<= 8.2

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial

CVE-2013-2219

<= 8.2

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which

CVE-2012-2746

<= 8.2

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been cha

CVE-2012-2678

<= 8.2

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been c

CVE-2011-0532

all versions

The (1) backup and restore scripts, (2) main initialization script, and (3) ldap-agent script in 389 Directory Server 1.2.x (aka R

CVE-2011-0022

all versions

The setup scripts in 389 Directory Server 1.2.x (aka Red Hat Directory Server 8.2.x), when multiple unprivileged instances are con

CVE-2011-0019

all versions

slapd (aka ns-slapd) in 389 Directory Server 1.2.7.5 (aka Red Hat Directory Server 8.2.x or dirsrv) does not properly handle simpl

CVE-2010-2241

all versions

The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissio

CVE-2008-3283

all versions

Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 an

CVE-2008-2930

all versions

Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to c

CVE-2008-2929

all versions

Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Di

CVE-2008-2928

all versions

Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote att

CVE-2008-1677

all versions

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to ca

CVE-2008-0893

all versions

Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scrip

CVE-2008-0892

all versions

The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0

CVE-2008-0889

all versions

Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console scrip

CVE-2008-0890

<= 7.1

Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR