A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash or hang while authenticating with an user having a malformed userPassword. By default only the administrator may directly add hashed password that can trigger the issue. But if nsslapd-allow-hashed-passwords config parameter is turned on, any user can trigger the issue.

The problem is triggered by adding a password to an user using the hashed format (with a hash value too long for the specified hash scheme) Then later on when trying to authenticate on that user its triggers the buffer overflow

By default, only administrators are allowed to add hashed passwords but there is a configuration parameter (nsslapd-allow-hashed-passwords) allowing any users to add hashed passwords and potentially trigger the DoS.

This vulnerability affects versions: >= 1.3.7.2

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.

A flaw was found in 389-ds-base. The problem occurs when issuing a Modify DN LDAP operation through the ldap protocol (using a TCP-IP or Unix socket as defined in the LDAP RFC https://datatracker.ietf.org/doc/html/rfc4511#section-4.9) If it moves an ldap entry in the DIT at the same time that a failing operation impacts its parent entry.

A flaw was found in 389-ds-base. The LDBM backend attribute encryption implementation in ldap/servers/slapd/back-ldbm/ldbmattrcrypt.c uses a hardcoded static initialization vector (IV) — 16 bytes of 0x61 — for all AES-CBC-PAD and 3DES-CBC-PAD encryption operations. CBC mode requires a unique, unpredictable IV per encryption operation to provide semantic security. The static IV causes identical plaintext attribute values to produce identical ciphertext, enabling an attacker with privileged read access to the LDBM database files to detect plaintext equality across entries by comparing ciphertext blocks and to facilitate offline cryptanalysis of encrypted attributes.