The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 389_directory_server | Fedoraproject | 1.2.1 (including) | 1.2.1 (including) |
| 389_directory_server | Fedoraproject | 1.2.2 (including) | 1.2.2 (including) |
| 389_directory_server | Fedoraproject | 1.2.3 (including) | 1.2.3 (including) |
| 389_directory_server | Fedoraproject | 1.2.5 (including) | 1.2.5 (including) |
| 389_directory_server | Fedoraproject | 1.2.5-rc1 (including) | 1.2.5-rc1 (including) |
| 389_directory_server | Fedoraproject | 1.2.5-rc2 (including) | 1.2.5-rc2 (including) |
| 389_directory_server | Fedoraproject | 1.2.5-rc3 (including) | 1.2.5-rc3 (including) |
| 389_directory_server | Fedoraproject | 1.2.5-rc4 (including) | 1.2.5-rc4 (including) |
| 389_directory_server | Fedoraproject | 1.2.6 (including) | 1.2.6 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-a2 (including) | 1.2.6-a2 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-a3 (including) | 1.2.6-a3 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-a4 (including) | 1.2.6-a4 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-rc1 (including) | 1.2.6-rc1 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-rc2 (including) | 1.2.6-rc2 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-rc3 (including) | 1.2.6-rc3 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-rc6 (including) | 1.2.6-rc6 (including) |
| 389_directory_server | Fedoraproject | 1.2.6-rc7 (including) | 1.2.6-rc7 (including) |
| 389_directory_server | Fedoraproject | 1.2.6.1 (including) | 1.2.6.1 (including) |
| 389_directory_server | Fedoraproject | 1.2.7-alpha3 (including) | 1.2.7-alpha3 (including) |
| 389_directory_server | Fedoraproject | 1.2.7.5 (including) | 1.2.7.5 (including) |
| 389_directory_server | Fedoraproject | 1.2.8-alpha1 (including) | 1.2.8-alpha1 (including) |
| 389_directory_server | Fedoraproject | 1.2.8-alpha2 (including) | 1.2.8-alpha2 (including) |
| 389_directory_server | Fedoraproject | 1.2.8-alpha3 (including) | 1.2.8-alpha3 (including) |
| 389_directory_server | Fedoraproject | 1.2.8-rc1 (including) | 1.2.8-rc1 (including) |
| 389_directory_server | Fedoraproject | 1.2.8-rc2 (including) | 1.2.8-rc2 (including) |
| 389_directory_server | Fedoraproject | 1.2.8.1 (including) | 1.2.8.1 (including) |
| 389_directory_server | Fedoraproject | 1.2.8.2 (including) | 1.2.8.2 (including) |
| 389_directory_server | Fedoraproject | 1.2.8.3 (including) | 1.2.8.3 (including) |
| 389_directory_server | Fedoraproject | 1.2.9.9 (including) | 1.2.9.9 (including) |
| 389_directory_server | Fedoraproject | 1.2.10 (including) | 1.2.10 (including) |
| 389_directory_server | Fedoraproject | 1.2.10-alpha8 (including) | 1.2.10-alpha8 (including) |
| 389_directory_server | Fedoraproject | 1.2.10-rc1 (including) | 1.2.10-rc1 (including) |
| 389_directory_server | Fedoraproject | 1.2.10.2 (including) | 1.2.10.2 (including) |
| 389_directory_server | Fedoraproject | 1.2.10.3 (including) | 1.2.10.3 (including) |
| 389_directory_server | Fedoraproject | 1.2.10.4 (including) | 1.2.10.4 (including) |
| 389_directory_server | Fedoraproject | 1.2.10.11 (including) | 1.2.10.11 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.1 (including) | 1.2.11.1 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.5 (including) | 1.2.11.5 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.6 (including) | 1.2.11.6 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.8 (including) | 1.2.11.8 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.9 (including) | 1.2.11.9 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.10 (including) | 1.2.11.10 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.11 (including) | 1.2.11.11 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.12 (including) | 1.2.11.12 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.13 (including) | 1.2.11.13 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.14 (including) | 1.2.11.14 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.15 (including) | 1.2.11.15 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.17 (including) | 1.2.11.17 (including) |
| 389_directory_server | Fedoraproject | 1.2.11.19 (including) | 1.2.11.19 (including) |
| Red Hat Enterprise Linux 6 | RedHat | 389-ds-base-0:1.2.11.15-14.el6_4 | * |
| 389-ds-base | Ubuntu | precise | * |
| 389-ds-base | Ubuntu | quantal | * |
| 389-ds-base | Ubuntu | raring | * |
| 389-ds-base | Ubuntu | saucy | * |
| 389-ds-base | Ubuntu | upstream | * |