09 Mar 2015

CVE-2014-8105

Publié par . Publié dans Gain information

Vulnerability Details : CVE-2014-8105

389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors.
Publish Date : 2015-03-10 Last Update Date : 2015-03-11

- CVSS Scores & Vulnerability Types

CVSS Score	5.0
Confidentiality Impact	Partial(There is considerable informational disclosure.)
Integrity Impact	None(There is no impact to the integrity of the system)
Availability Impact	None(There is no impact to the availability of the system.)
Access Complexity	Low(Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required(Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Obtain Information
CWE ID	200

- Related OVAL Definitions

Title	Definition Id	Class	Family
RHSA-2015:0416: 389-ds-base security, bug fix, and enhancement update (Important)	oval:com.redhat.rhsa:def:20150416		unix
RHSA-2015:0628: 389-ds-base security, bug fix, and enhancement update (Important)	oval:com.redhat.rhsa:def:20150628		unix

OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2014-8105

#	Product Type	Vendor	Product	Version
1	Application	Fedoraproject	389 Directory Server	1.3.2.26	Version Details Vulnerabilities
2	Application	Fedoraproject	389 Directory Server	1.3.3.0	Version Details Vulnerabilities
3	Application	Fedoraproject	389 Directory Server	1.3.3.2	Version Details Vulnerabilities
4	Application	Fedoraproject	389 Directory Server	1.3.3.3	Version Details Vulnerabilities
5	Application	Fedoraproject	389 Directory Server	1.3.3.5	Version Details Vulnerabilities
6	Application	Fedoraproject	389 Directory Server	1.3.3.8	Version Details Vulnerabilities