Authentication Vulnerability in 389 Directory Server by Red Hat
CVE-2014-0132

Currently unrated

Key Information:

Vendor: Fedoraproject
Status: 389 Directory Server
Vendor: CVE Published:; 18 March 2014

🔔 Create Fedoraproject Vulnerability Alert

What is CVE-2014-0132?

The SASL authentication mechanism in 389 Directory Server prior to version 1.2.11.26 contains a flaw that allows authenticated remote users to connect as any user. This is achievable through manipulation of the authzid parameter during a SASL/GSSAPI bind, potentially enabling attackers to escalate privileges and access sensitive data or system functions beyond their intended permissions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch