Oval Definition:oval:com.redhat.rhsa:def:20131182
Revision Date:2013-08-28Version:637
Title:RHSA-2013:1182: 389-ds-base security update (Important)
Description:The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

  • It was discovered that the 389 Directory Server did not properly handle the receipt of certain MOD operations with a bogus Distinguished Name (DN). A remote, unauthenticated attacker could use this flaw to cause the 389 Directory Server to crash. (CVE-2013-4283)

    All 389-ds-base users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, the 389 server service will be restarted automatically.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2013-4283
    CVE-2013-4283
    RHSA-2013:1182
    RHSA-2013:1182-00
    RHSA-2013:1182-01
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • 389-ds-base is earlier than 0:1.2.11.15-22.el6_4
  • AND 389-ds-base is signed with Red Hat redhatrelease2 key
  • 389-ds-base-devel is earlier than 0:1.2.11.15-22.el6_4
  • AND 389-ds-base-devel is signed with Red Hat redhatrelease2 key
  • 389-ds-base-libs is earlier than 0:1.2.11.15-22.el6_4
  • AND 389-ds-base-libs is signed with Red Hat redhatrelease2 key
  • BACK