CVE-2014-0132

Published: Mar 18, 2014Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.

Affected (18)

Products: Fedoraproject: 389 Directory Server

Fedoraproject

1 product

389 Directory Server

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject 389 Directory Server	Up to 1.2.11.25
Fedoraproject 389 Directory Server	Version 1.2.11.10
Fedoraproject 389 Directory Server	Version 1.2.11.11
Fedoraproject 389 Directory Server	Version 1.2.11.12
Fedoraproject 389 Directory Server	Version 1.2.11.13
Fedoraproject 389 Directory Server	Version 1.2.11.14
Fedoraproject 389 Directory Server	Version 1.2.11.15
Fedoraproject 389 Directory Server	Version 1.2.11.17
Fedoraproject 389 Directory Server	Version 1.2.11.19
Fedoraproject 389 Directory Server	Version 1.2.11.1
Fedoraproject 389 Directory Server	Version 1.2.11.20
Fedoraproject 389 Directory Server	Version 1.2.11.21
Fedoraproject 389 Directory Server	Version 1.2.11.22
Fedoraproject 389 Directory Server	Version 1.2.11.23
Fedoraproject 389 Directory Server	Version 1.2.11.5
Fedoraproject 389 Directory Server	Version 1.2.11.6
Fedoraproject 389 Directory Server	Version 1.2.11.8
Fedoraproject 389 Directory Server	Version 1.2.11.9