Approved changes feed: RSS · Atom

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.14:*:*:*:*:*:*:*

part: a version: 1.2.11.14 update: *

VendorFedoraproject (edb280c5-6017-5a8b-8553-28ce724531a7)
Product389 Directory Server (5f622488-f9e9-5459-b9af-dd22a2fc0b8a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/389-ds-base purl2cpe 2026-06-01 10:15:30.883540
pkg:deb/ubuntu/389-ds-base purl2cpe 2026-06-01 10:15:30.883541
pkg:github/389ds/389-ds-base purl2cpe 2026-06-01 10:15:30.883543
pkg:gitlab/redhat/389-ds-base purl2cpe 2026-06-01 10:15:30.883544
pkg:port389/389ds purl2cpe 2026-06-01 10:15:30.883545
pkg:rpm/fedora/389-ds-base purl2cpe 2026-06-01 10:15:30.883547
pkg:rpm/opensuse/389-ds-base purl2cpe 2026-06-01 10:15:30.883548

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3562 vulnerable 2026-06-03 14:33:55.255435 Details available
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
Published: 2014-08-21T14:00:00.000Z
Updated: 2024-08-06T10:50:17.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0132 vulnerable 2026-06-03 14:33:37.084134 Details available
The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.
Published: 2014-03-18T14:00:00.000Z
Updated: 2024-08-06T09:05:38.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1897 vulnerable 2026-06-03 14:32:52.480961 Details available
The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.
Published: 2013-05-13T23:00:00.000Z
Updated: 2024-08-06T15:20:36.703Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.