Skip to content
OpenAdvisories
High ELSA-2015-0895 1 CVE

Important: 389-ds-base security update (Oracle Linux 7)

Published Apr 28, 2015 · Updated Apr 28, 2015

Summary

[1.3.3.1-16]
- release 1.3.3.1-16
- Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 389-ds-base 0:1.3.3.1-16.el7_1
Oracle Linux · 7 389-ds-base-devel 0:1.3.3.1-16.el7_1
Oracle Linux · 7 389-ds-base-libs 0:1.3.3.1-16.el7_1

Vulnerabilities 1

  • Unscored —

    389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entri…