CVE-2012-0833
Fixed in a distro release EPSS <1%
The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.
Products: fedoraproject 389_directory_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat directory server 8 | adminutil | 0:1.1.8-3.el5dsrv |
| Red Hat directory server 8 | adminutil-debuginfo | 0:1.1.8-3.el5dsrv |
| Red Hat directory server 8 | adminutil-devel | 0:1.1.8-3.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base | 0:8.2.11-5.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-debuginfo | 0:8.2.11-5.el5dsrv |
| Red Hat directory server 8 | redhat-ds-base-devel | 0:8.2.11-5.el5dsrv |
| Red Hat Enterprise Linux 6 | 389-ds-base | 0:1.2.10.2-15.el6 |
| Red Hat Enterprise Linux 6 | 389-ds-base-debuginfo | 0:1.2.10.2-15.el6 |
| Red Hat Enterprise Linux 6 | 389-ds-base-devel | 0:1.2.10.2-15.el6 |
| Red Hat Enterprise Linux 6 | 389-ds-base-libs | 0:1.2.10.2-15.el6 |