NVD

Id
29062  
Name
CVE-2014-0132  
Description
The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-18  
Modified Date
2014-03-19  
Seq
2014-0132  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153561 29062 CVE-2014-0132 RHSA-2014:0292  View
153562 29062 CVE-2014-0132 https://fedorahosted.org/389/changeset/76acff12a86110d4165f94e2cba13ef5c7ebc38a/  View
153563 29062 CVE-2014-0132 https://fedorahosted.org/389/ticket/47739  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12876 JVNDB-2014-001751 389 Directory Server の SASL 認証機能における任意のユーザとして接続される脆弱性 389 Directory Server の SASL 認証機能には、任意のユーザとして接続され、権限を取得される脆弱性が存在します。 CVE-2014-0132 67533 CVE-2014-0132 29062 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001751.html 2014-03-11 2014-03-24 View