Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-35518 →
DEBIAN-CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an una...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
389-ds-base
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.10-1"}]}]
Debian:13
389-ds-base
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.10-1"}]}]
Références
- advisory security-tracker.debian.org