The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade 389-ds-base-develUpgrade 389-ds-base-libsUpgrade 389-ds-base | Dec 1, 2016 | Mar 18, 2014 |
| Debian | — | Upgrade 389-ds-base | Jul 30, 2024 | Mar 18, 2014 |
| Oracle_linux | — | Upgrade 389-ds-base-develUpgrade 389-ds-baseUpgrade 389-ds-base-libs | Oct 16, 2024 | Mar 18, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub