CVE-2016-4992: Infoleak
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.
Other sources
A vulnerability in 389-ds-base was found that allows to bypass limitations for compare and read operations specified by Access Control Instructions.
When having LDAP sub-tree with some existing objects and having BIND DN which have no privileges over objects inside the sub-tree, unprivileged user can send LDAP ADD operation specifying an object in (supposedly) inaccessible sub-tree. The returned error messages discloses the information when the queried object exists having the specified value. Attacker can use this flaw to guess values of RDN component by repeating the above process.
Upstream commit:
https://github.com/389ds/389-ds-base/commit/0b932d4b926d46ac5060f02617330dc444e06da1
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4992?
CVE-2016-4992 has a moderate severity rating, as it allows remote attackers to infer the existence of certain directory objects.
How do I fix CVE-2016-4992?
To mitigate CVE-2016-4992, apply the appropriate security patches provided by Red Hat for your affected version.
Which versions of Red Hat are affected by CVE-2016-4992?
CVE-2016-4992 affects Red Hat Enterprise Linux Desktop, HPC Node, Server, and Workstation versions 6 and 7.
Is CVE-2016-4992 a remote code execution vulnerability?
No, CVE-2016-4992 is not a remote code execution vulnerability; it involves information disclosure.
What are the implications of CVE-2016-4992 for data security?
CVE-2016-4992 can lead to unauthorized inference of directory service information, potentially compromising sensitive data.