cbcvebase.
CVE-2012-0833
published 2012-07-03

CVE-2012-0833: The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control…

PriorityP410low2.3CVSS 2.0
AVAACMAuSCNINAP
EPSS
0.90%
55.7th percentile
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.

Affected

16 ranges
VendorProductVersion rangeFixed in
debian389-ds-base——
fedoraproject389_directory_server<= 1.2.10—
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——
fedoraproject389_directory_server——

CVSS provenance

nvdv2.02.3LOWAV:A/AC:M/Au:S/C:N/I:N/A:P
vendor_debian2.3LOW
vendor_redhat2.3LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.