When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0599 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration,     the Administration Server HTTP agent package, and the GUI console packages.

    Security Fix(es):

    * 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * RHDS11: write permission of ACI changes ns-slapds behavior on search operation (BZ#1909675)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1243 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages     for server administration.

    Security Fix(es):

    * 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518) (BZ#1905565)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * The UI become unresponsive when an error occured (BZ#1751082)

    * The python-lib389 class Accounts displayed an error during delete operations (BZ#1859215)

    * The server version number has been added to the UI (BZ#1859288)

    * Searches by an unauthorized client can no longer determine if an entry exists or not by the result code     (BZ#1925537)

    * Changes made on the Server Tuning page in the web console are now correctly reflected (BZ#1927051)

    * Adding new schema using dsconf no longer displayes a values has to be a tuple error (BZ#1937036)

    Users of Red Hat Directory Server 11 are advised to install these updated packages.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5231-1 advisory.

    It was discovered that 389 Directory Server presented to users, during authentication, an error message     which could be used to discover if a certain LDAP DN existed or not. A remote unauthenticated attacker     could possibly use this to check the existence of an entry in a LDAP database and expose sensitive     information. This issue affected only Ubuntu 20.04 ESM. (CVE-2020-35518)

    It was discovered that 389 Directory Server was incorrectly validating data used to access memory     addresses. An authenticated attacker using a Syncrepl client could use this issue with a specially crafted     query to cause 389 Directory Server to crash, resulting in a denial of service. (CVE-2021-3514)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1650 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has 389-ds-base packages installed that are affected by a vulnerability:

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has 389-ds-base packages installed that are affected by a vulnerability:

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2323 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2323-1 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2323 advisory.

    [1.3.10.2-12]
    - Bump version to 1.3.10.2-12

    [1.3.10.2-11]
    - Bump version to 1.3.10.2-11
    - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation     time
    - Resolves: Bug 1931182 - information disclosure during the binding of a DN

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2323 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Add new access log keywords for time spent in work queue and actual operation time (BZ#1953673)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1258 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Replication now resolves entry conflicts during a modrdn operation (BZ#1946631)

    * Searches by an unauthorized client can no longer determine if an entry exists or not by the result code     (BZ#1946634)

    Users of Red Hat Directory Server 11 are advised to install these updated packages.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1086 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1086 advisory.

    - Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding     of a DN

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1086 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * dscreate would not always set the correct hostname for the self-signed certificate database (BZ#1912481)

    * Indexing a heavily nested database could fail and it would corrupt the database (BZ#1936461)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for 389-ds fixes the following issues :

  - 389-ds was updated to version 1.4.3.19 

  - CVE-2020-35518: Fixed an information disclosure during     the binding of a DN (bsc#1181159).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for 389-ds fixes the following issues :

389-ds was updated to version 1.4.3.19

  - CVE-2020-35518: Fixed an information disclosure during     the binding of a DN (bsc#1181159).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-dc1a4934a5 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-7458e2d835 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196299	RHEL 6 : 389-ds-base (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
194283	RHEL 8 : redhat-ds:11 (RHSA-2021:0599)	Nessus	Red Hat Local Security Checks	medium
194136	RHEL 8 : redhat-ds:11 (RHSA-2021:1243)	Nessus	Red Hat Local Security Checks	medium
183133	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : 389 Directory Server vulnerabilities (USN-5231-1)	Nessus	Ubuntu Local Security Checks	medium
169520	Amazon Linux 2 : 389-ds-base (ALAS-2021-1650)	Nessus	Amazon Linux Local Security Checks	medium
160825	NewStart CGSL CORE 5.05 / MAIN 5.05 : 389-ds-base Vulnerability (NS-SA-2022-0026)	Nessus	NewStart CGSL Local Security Checks	medium
154624	NewStart CGSL CORE 5.04 / MAIN 5.04 : 389-ds-base Vulnerability (NS-SA-2021-0111)	Nessus	NewStart CGSL Local Security Checks	medium
150772	CentOS 7 : 389-ds-base (RHSA-2021:2323)	Nessus	CentOS Local Security Checks	medium
150710	Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:2323)	Nessus	Scientific Linux Local Security Checks	medium
150429	Oracle Linux 7 : 389-ds-base (ELSA-2021-2323)	Nessus	Oracle Linux Local Security Checks	medium
150381	RHEL 7 : 389-ds-base (RHSA-2021:2323)	Nessus	Red Hat Local Security Checks	medium
148807	RHEL 8 : 389-ds:1.4 (RHSA-2021:1258)	Nessus	Red Hat Local Security Checks	medium
148424	CentOS 8 : 389-ds:1.4 (CESA-2021:1086)	Nessus	CentOS Local Security Checks	medium
148423	Oracle Linux 8 : 389-ds:1.4 (ELSA-2021-1086)	Nessus	Oracle Linux Local Security Checks	medium
148368	RHEL 8 : 389-ds:1.4 (RHSA-2021:1086)	Nessus	Red Hat Local Security Checks	medium
147846	openSUSE Security Update : 389-ds (openSUSE-2021-418)	Nessus	SuSE Local Security Checks	medium
147463	SUSE SLES15 Security Update : 389-ds (SUSE-SU-2021:0724-1)	Nessus	SuSE Local Security Checks	medium
147156	Fedora 32 : 389-ds-base / dogtag-pki / freeipa / pki-core (2021-dc1a4934a5)	Nessus	Fedora Local Security Checks	medium
147026	Fedora 33 : 389-ds-base / dogtag-pki / freeipa / pki-core (2021-7458e2d835)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2020-35518

medium

Tenable Plugins

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium