REDHAT-BUG-928105
First published: Tue Mar 26 2013(Updated: )
It was found that the 389 Directory Server did not properly restrict access to entries when the 'nsslapd-allow-anonymous-access' configuration setting is set to 'rootdse'. An anonymous user could connect to the LDAP database and, if the search scope is set to BASE, obtain access to information outside of the rootDSE. The 'rootdse' option exists to provide anonymous access to the rootDSE but no other entries in the directory. An administrator could believe that directory entries are being restricted with this option enabled, however the information provided would be the same as if 'nsslapd-allow-anonymous-access' were set to 'on'. ACI's are still properly evaluated despite this flaw, so this can easily be mitigated by removing the anonymous read ACL.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 389 Directory Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.fedorahosted.org/cgit/389/ds.git/commit/?h=389-ds-base-1.2.11&id=5a18c828533a670e7143327893f8171a19062286
- https://fedorahosted.org/389/ticket/47308
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=928945
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=928948
- https://fedorahosted.org/freeipa/ticket/3540
- https://rhn.redhat.com/errata/RHSA-2013-0742.html
- https://bugzilla.redhat.com/show_bug.cgi?id=928105
Frequently Asked Questions
What is the severity of REDHAT-BUG-928105?
The severity of REDHAT-BUG-928105 is considered critical due to potential unauthorized access to sensitive directory information.
How do I fix REDHAT-BUG-928105?
To fix REDHAT-BUG-928105, update the 389 Directory Server configuration to restrict anonymous access, particularly adjusting the 'nsslapd-allow-anonymous-access' setting.
What versions of 389 Directory Server are affected by REDHAT-BUG-928105?
REDHAT-BUG-928105 affects multiple versions of the 389 Directory Server where the 'nsslapd-allow-anonymous-access' is misconfigured.
Can unauthorized users exploit REDHAT-BUG-928105?
Yes, unauthorized users can exploit REDHAT-BUG-928105 to gain access to sensitive entries in the LDAP database without proper authentication.
What information can be accessed through REDHAT-BUG-928105?
An attacker exploiting REDHAT-BUG-928105 can access information about directory entries if the search scope is set to BASE.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-1897
- agent/references
- agent/severity
- agent/event
- agent/description
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/389 directory server