When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5231-1 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

  - When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer     dereference using a specially crafted query, causing a crash. (CVE-2021-3514)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1650 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has 389-ds-base packages installed that are affected by a vulnerability:

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has 389-ds-base packages installed that are affected by a vulnerability:

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2323 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2323-1 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2323 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2323 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1258 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1086 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1086 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1086 advisory.

  - 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for 389-ds fixes the following issues :

  - 389-ds was updated to version 1.4.3.19 

  - CVE-2020-35518: Fixed an information disclosure during     the binding of a DN (bsc#1181159).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for 389-ds fixes the following issues :

389-ds was updated to version 1.4.3.19

  - CVE-2020-35518: Fixed an information disclosure during     the binding of a DN (bsc#1181159).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-dc1a4934a5 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-7458e2d835 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
183133	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : 389 Directory Server vulnerabilities (USN-5231-1)	Nessus	Ubuntu Local Security Checks	medium
169520	Amazon Linux 2 : 389-ds-base (ALAS-2021-1650)	Nessus	Amazon Linux Local Security Checks	medium
160825	NewStart CGSL CORE 5.05 / MAIN 5.05 : 389-ds-base Vulnerability (NS-SA-2022-0026)	Nessus	NewStart CGSL Local Security Checks	medium
154624	NewStart CGSL CORE 5.04 / MAIN 5.04 : 389-ds-base Vulnerability (NS-SA-2021-0111)	Nessus	NewStart CGSL Local Security Checks	medium
150772	CentOS 7 : 389-ds-base (CESA-2021:2323)	Nessus	CentOS Local Security Checks	medium
150710	Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:2323)	Nessus	Scientific Linux Local Security Checks	medium
150429	Oracle Linux 7 : 389-ds-base (ELSA-2021-2323)	Nessus	Oracle Linux Local Security Checks	medium
150381	RHEL 7 : 389-ds-base (RHSA-2021:2323)	Nessus	Red Hat Local Security Checks	medium
148807	RHEL 8 : 389-ds:1.4 (RHSA-2021:1258)	Nessus	Red Hat Local Security Checks	medium
148424	CentOS 8 : 389-ds:1.4 (CESA-2021:1086)	Nessus	CentOS Local Security Checks	medium
148423	Oracle Linux 8 : 389-ds:1.4 (ELSA-2021-1086)	Nessus	Oracle Linux Local Security Checks	medium
148368	RHEL 8 : 389-ds:1.4 (RHSA-2021:1086)	Nessus	Red Hat Local Security Checks	medium
147846	openSUSE Security Update : 389-ds (openSUSE-2021-418)	Nessus	SuSE Local Security Checks	medium
147463	SUSE SLES15 Security Update : 389-ds (SUSE-SU-2021:0724-1)	Nessus	SuSE Local Security Checks	medium
147156	Fedora 32 : 389-ds-base / dogtag-pki / freeipa / pki-core (2021-dc1a4934a5)	Nessus	Fedora Local Security Checks	medium
147026	Fedora 33 : 389-ds-base / dogtag-pki / freeipa / pki-core (2021-7458e2d835)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2020-35518

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium