CVE-2012-2678: Low severity redhat Directory Server vulnerability
Published Jul 3, 2012
·Updated
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
Affected Software
42 affected components
redhat Directory Server<=8.2
redhat Directory Server=7.1
redhat Directory Server=8.0
redhat Directory Server=8.1
Fedoraproject 389 Directory Server<=1.2.11.5
Fedoraproject 389 Directory Server=1.2.1
Fedoraproject 389 Directory Server=1.2.2
Fedoraproject 389 Directory Server=1.2.3
Fedoraproject 389 Directory Server=1.2.5
Fedoraproject 389 Directory Server=1.2.5-rc1
Fedoraproject 389 Directory Server=1.2.5-rc2
Fedoraproject 389 Directory Server=1.2.5-rc3
Fedoraproject 389 Directory Server=1.2.5-rc4
Fedoraproject 389 Directory Server=1.2.6
Fedoraproject 389 Directory Server=1.2.6-a2
Fedoraproject 389 Directory Server=1.2.6-a3
Fedoraproject 389 Directory Server=1.2.6-a4
Fedoraproject 389 Directory Server=1.2.6-rc1
Fedoraproject 389 Directory Server=1.2.6-rc2
Fedoraproject 389 Directory Server=1.2.6-rc3
Fedoraproject 389 Directory Server=1.2.6-rc6
Fedoraproject 389 Directory Server=1.2.6-rc7
Fedoraproject 389 Directory Server=1.2.6.1
Fedoraproject 389 Directory Server=1.2.7-alpha3
Fedoraproject 389 Directory Server=1.2.7.5
Fedoraproject 389 Directory Server=1.2.8-alpha1
Fedoraproject 389 Directory Server=1.2.8-alpha2
Fedoraproject 389 Directory Server=1.2.8-alpha3
Fedoraproject 389 Directory Server=1.2.8-rc1
Fedoraproject 389 Directory Server=1.2.8-rc2
Fedoraproject 389 Directory Server=1.2.8.1
Fedoraproject 389 Directory Server=1.2.8.2
Fedoraproject 389 Directory Server=1.2.8.3
Fedoraproject 389 Directory Server=1.2.9.9
Fedoraproject 389 Directory Server=1.2.10-alpha8
Fedoraproject 389 Directory Server=1.2.10-rc1
Fedoraproject 389 Directory Server=1.2.10.1
Fedoraproject 389 Directory Server=1.2.10.2
Fedoraproject 389 Directory Server=1.2.10.3
Fedoraproject 389 Directory Server=1.2.10.4
Fedoraproject 389 Directory Server=1.2.10.7
Fedoraproject 389 Directory Server=1.2.11.1
Event History
Jul 3, 2012
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description