REDHAT-BUG-1358865: Low severity red hat directory server vulnerability
It was found that 389 Directory Server is vulnerable to a remote password disclosure via timing attack. Due to the use of strcmp and memcmp in the verification of passwords and hashes, remote attacker is able to tell the difference between computation times which makes him able to retrieve the password after many tries.
This affects systems storing passwords in plain text. Systems using unsalted hashes might be unsafe as well if using weak hash algorithms, however the attack would be very time-consuming.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1358865?
REDHAT-BUG-1358865 is classified as a high-severity vulnerability due to its potential for unauthorized password disclosure.
How do I fix REDHAT-BUG-1358865?
To fix REDHAT-BUG-1358865, you should apply the latest patches or updates provided by Red Hat for the 389 Directory Server.
What impact does REDHAT-BUG-1358865 have on the system?
The impact of REDHAT-BUG-1358865 allows a remote attacker to exploit timing discrepancies in password verification, potentially revealing passwords.
Which versions of the 389 Directory Server are affected by REDHAT-BUG-1358865?
REDHAT-BUG-1358865 affects various versions of the Red Hat 389 Directory Server, specifically those using vulnerable strcmp and memcmp functions.
Is REDHAT-BUG-1358865 a local or remote vulnerability?
REDHAT-BUG-1358865 is a remote vulnerability, allowing attackers to exploit it from outside the local network.