CVE-2013-4485

Published: Nov 23, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.

Affected (6)

Products: Redhat: Enterprise Linux, Directory Server · Fedoraproject: 389 Directory Server

2 products

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject 389 Directory Server	Version 1.2.11.15
Redhat Directory Server	Up to 8.2
Redhat Directory Server	Version 7.1
Redhat Directory Server	Version 8.0
Redhat Directory Server	Version 8.1