CVE-2016-5405 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstati...
CriticalCVSS 9.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/389-ds-base(Debian:12) | < 1.3.5.15-1 | 1.3.5.15-1 |
| debian/389-ds-base(Debian:13) | < 1.3.5.15-1 | 1.3.5.15-1 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 6.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2016-5405 vendor-advisory
- RHSA-2016:2594 vendor-advisory
- RHSA-2016:2765 vendor-advisory
- 93884 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking vendor-advisory
- bugs.debian.org issue-tracking