CVE-2016-5405: Critical severity red hat enterprise linux desktop vulnerability
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
Other sources
It was found that 389 Directory Server is vulnerable to a remote password disclosure via timing attack. Due to the use of strcmp and memcmp in the verification of passwords and hashes, remote attacker is able to tell the difference between computation times which makes him able to retrieve the password after many tries.
This affects systems storing passwords in plain text. Systems using unsalted hashes might be unsafe as well if using weak hash algorithms, however the attack would be very time-consuming.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5405?
CVE-2016-5405 is classified as a critical vulnerability due to its ability to allow remote attackers to obtain user passwords.
How do I fix CVE-2016-5405?
To fix CVE-2016-5405, apply the relevant security patches provided by Red Hat for the affected versions of the software.
Which platforms are affected by CVE-2016-5405?
CVE-2016-5405 affects Red Hat Enterprise Linux Desktop, HPC Node, Server, and Workstation versions 6 and 7.
What are the potential impacts of CVE-2016-5405?
The potential impacts of CVE-2016-5405 include unauthorized access to user accounts, leading to data breaches or further exploitation.
Is CVE-2016-5405 being actively exploited in the wild?
There are indications that CVE-2016-5405 has been targeted by attackers, emphasizing the need for immediate remediation.