Denial of Service Vulnerability in 389 Directory Server by Red Hat
CVE-2011-0704

5.9MEDIUM

Key Information:

Vendor
CVE Published:
4 May 2018

Summary

An issue in the 389 Directory Server version 1.2.7.5, when compiled with mozldap, allows remote attackers to initiate a denial of service by sending an empty modify request. This can result in the server replica crashing, leading to potential downtime and disruption of services. Organizations using this version should take immediate steps to apply necessary patches or updates to mitigate this vulnerability.

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.