2.3

CVE-2012-0833: fedoraproject 389_directory_server

CVSS: 2.3v2.0LowModified
AliasesRHSA-2012:0813RHSA-2013:0549
Published 03-07-2012Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2012-0833 is a low (CVSS 2.3) vulnerability in fedoraproject 389_directory_server. EPSS estimates a 0.90% chance of exploitation in the next 30 days, higher than 59.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
19/100
0100
Low · default modelHow is this calculated?
CVSS score
2.3/10
010
Low · v2.0 (NVD)
EPSS score
0.90%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Timeline

  1. 03-07-2012
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.90%

Chance of exploitation in the next 30 days

Percentile

59%

Versus all other CVEs

30-day change

0.00 pp

From 0.90% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.90%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (fedorahosted.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Redhat10 products
  • 389-ds-base< 0:1.2.10.2-15.el6
  • 389-ds-base-debuginfo< 0:1.2.10.2-15.el6
  • 389-ds-base-devel< 0:1.2.10.2-15.el6
  • 389-ds-base-libs< 0:1.2.10.2-15.el6
  • adminutil< 0:1.1.8-3.el5dsrv
Fedoraproject1 product
  • 389_directory_server≤ 1.2.10 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.5 | 1.2.5:rc1 | 1.2.5:rc2 | 1.2.5:rc3 | 1.2.5:rc4 | 1.2.6 | 1.2.6:a2 | 1.2.6:a3 | 1.2.6:a4 | 1.2.6:rc1 | 1.2.6:rc2 | 1.2.6:rc3 | 1.2.6:rc6 | 1.2.6:rc7 | 1.2.6.1 | 1.2.7:alpha3 | 1.2.7.5 | 1.2.8:alpha1 | 1.2.8:alpha2 | 1.2.8:alpha3 | 1.2.8:rc1 | 1.2.8:rc2 | 1.2.8.1 | 1.2.8.2 | 1.2.8.3 | 1.2.9.9 | 1.2.10:alpha8

2 vendors · 11 products

References

58 links
Show all 58 references