Directory Server
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:directory_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Directory Server (3e674fee-72c5-5378-a09c-982c9590dba8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/389ds/389-ds-base |
purl2cpe | 2026-06-01 10:12:53.695399 |
pkg:gitlab/redhat/389-ds-base |
purl2cpe | 2026-06-01 10:12:53.695402 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4485 |
vulnerable | 2026-06-08 05:04:47.302656 |
Details available
389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2219 |
vulnerable | 2026-06-08 05:04:23.623800 |
Details available
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.
Published: 2013-07-31T10:00:00.000Z
Updated: 2024-08-06T15:27:41.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2746 |
vulnerable | 2026-06-08 05:02:06.078735 |
Details available
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
Published: 2012-07-03T16:00:00.000Z
Updated: 2024-08-06T19:42:32.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2678 |
vulnerable | 2026-06-08 05:02:05.396540 |
Details available
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
Published: 2012-07-03T16:00:00.000Z
Updated: 2024-08-06T19:42:31.470Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.