CVE-2013-0336: Input Validation
Sumit Bose discovered that FreeIPA's directory server (dirsrv) would segfault if an unauthenicated user attempted to connect to it with a missing username/dn. According to RFC 3062, connecting without specifying the username/dn is valid.
Acknowledgements:
This issue was discovered by Sumit Bose of Red Hat.
Other sources
The ipapwdchpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipapwdextop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0336?
CVE-2013-0336 is classified as a high severity vulnerability due to its potential to cause a denial of service by crashing the directory server.
How do I fix CVE-2013-0336?
To fix CVE-2013-0336, upgrade FreeIPA to a version later than 3.1.5 or apply the relevant patches provided by Red Hat.
Who discovered CVE-2013-0336?
CVE-2013-0336 was discovered by Sumit Bose.
Which versions of FreeIPA are affected by CVE-2013-0336?
CVE-2013-0336 affects FreeIPA versions 3.0.0 through 3.1.4.
What type of attack does CVE-2013-0336 facilitate?
CVE-2013-0336 facilitates a denial of service attack by causing the directory server to segfault when unauthenticated users connect without a username.