CVE-2013-1897: fedoraproject 389_directory_server

CVSS: 2.6v2.0LowModified

AliasesRHSA-2013:0742UBUNTU-CVE-2013-1897DEBIAN-CVE-2013-1897

Published 13-05-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-1897 is a low (CVSS 2.6) vulnerability in fedoraproject 389_directory_server. EPSS estimates a 2.10% chance of exploitation in the next 30 days, higher than 81.4% of scored vulnerabilities.

Overall risk

11/100

0100

Low · default modelHow is this calculated?

CVSS score

2.6/10

010

Low · v2.0 (NVD)

EPSS score

2.10%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

13-05-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.

CVSS metrics

1 score · 1 source · 1 version

v2.02.6

EPSS trend

Probability

2.10%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.10% on 20-09-2026

20-09-202620-10-2026

EPSS score

2.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Redhat4 products

389-ds-base< 0:1.2.11.15-14.el6_4
389-ds-base-debuginfo< 0:1.2.11.15-14.el6_4
389-ds-base-devel< 0:1.2.11.15-14.el6_4
389-ds-base-libs< 0:1.2.11.15-14.el6_4

Debian1 product

389-ds-base< 1.3.2.9-1

Fedoraproject1 product

389_directory_server1.2.1 | 1.2.2 | 1.2.3 | 1.2.5 | 1.2.5:rc1 | 1.2.5:rc2 | 1.2.5:rc3 | 1.2.5:rc4 | 1.2.6 | 1.2.6:a2 | 1.2.6:a3 | 1.2.6:a4 | 1.2.6:rc1 | 1.2.6:rc2 | 1.2.6:rc3 | 1.2.6:rc6 | 1.2.6:rc7 | 1.2.6.1 | 1.2.7:alpha3 | 1.2.7.5 | 1.2.8:alpha1 | 1.2.8:alpha2 | 1.2.8:alpha3 | 1.2.8:rc1 | 1.2.8:rc2 | 1.2.8.1 | 1.2.8.2 | 1.2.8.3 | 1.2.9.9 | 1.2.10 | 1.2.10:alpha8 | 1.2.10:rc1 | 1.2.10.2 | 1.2.10.3 | 1.2.10.4 | 1.2.10.11 | 1.2.11.1 | 1.2.11.5 | 1.2.11.6 | 1.2.11.8 | 1.2.11.9 | 1.2.11.10 | 1.2.11.11 | 1.2.11.12 | 1.2.11.13 | 1.2.11.14 | 1.2.11.15 | 1.2.11.17 | 1.2.11.19 | 1.3.0.2 | 1.3.0.3 | 1.3.0.4

Ubuntu1 product