Test Kennung:	1.3.6.1.4.1.25623.1.0.883389
Kategorie:	CentOS Local Security Checks
Titel:	CentOS: Security Advisory for 389-ds-base (CESA-2021:3807)
Zusammenfassung:	The remote host is missing an update for the '389-ds-base'; package(s) announced via the CESA-2021:3807 advisory.
Beschreibung:	Summary: The remote host is missing an update for the '389-ds-base' package(s) announced via the CESA-2021:3807 advisory. Vulnerability Insight: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed (CVE-2021-3652) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * A plugin can create an index. Even if the index can be used immediately (for searches) the index remains offline until further reindex (BZ#2005399) * In some rare case, a replication connection may be treated as a regular connection and ACIs evaluated even if they should not. (BZ#2005434) * A regular connection can be erroneously flagged replication connection (BZ#2005435) Affected Software/OS: '389-ds-base' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3652 https://bugzilla.redhat.com/show_bug.cgi?id=1982782 https://github.com/389ds/389-ds-base/issues/4817 https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.