cbcvebase.
CVE-2016-4992
published 2017-06-08

CVE-2016-4992: 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through…

high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.

Affected

12 ranges
VendorProductVersion rangeFixed in
debian389-ds-base< 389-ds-base 1.3.5.13-1 (bookworm)389-ds-base 1.3.5.13-1 (bookworm)
port389389-ds-base>= 0 < 1.3.5.13-11.3.5.13-1
port389389-ds-base>= 0 < 1.3.5.13-11.3.5.13-1
port389389-ds-base>= 0 < 1.3.5.13-11.3.5.13-1
redhatenterprise_linux_desktop
redhatenterprise_linux_desktop
redhatenterprise_linux_hpc_node
redhatenterprise_linux_hpc_node
redhatenterprise_linux_server
redhatenterprise_linux_server
redhatenterprise_linux_workstation
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
osv7.5HIGH