NVD

Id
45834  
Name
CVE-2012-4450  
Description
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-30  
Modified Date
2013-03-07  
Seq
2012-4450  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230113 45834 CVE-2012-4450 http://git.fedorahosted.org/cgit/389/ds.git/commit/?id=5beb93d42efb807838c09c5fab898876876f8d09  View
230114 45834 CVE-2012-4450 RHSA-2013:0503  View
230115 45834 CVE-2012-4450 [oss-security] 20120926 CVE Request -- 389-ds-base: Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in ACL (ACL rules bypass possible)  View
230116 45834 CVE-2012-4450 [oss-security] 20120926 Re: CVE Request -- 389-ds-base: Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in ACL (ACL rules bypass possible)  View
230117 45834 CVE-2012-4450 55690  View
230118 45834 CVE-2012-4450 https://bugzilla.redhat.com/show_bug.cgi?id=860772  View
230119 45834 CVE-2012-4450 https://fedorahosted.org/389/ticket/340  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28967 JVNDB-2012-004674 389 Directory Server における ACL の制限を回避される脆弱性 389 Directory Server は、DN のエントリが modrdn 操作によって移動される際、ACL が適切に更新されないため、ACL の制限を回避され、DN エントリにアクセスされる脆弱性が存在します。 CVE-2012-4450 57688 CVE-2012-4450 45834 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004674.html 2012-04-16 2012-10-02 View