Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64

This script is Copyright (C) 2014 Tenable Network Security, Inc.

Synopsis :

The remote Scientific Linux host is missing one or more security

Description :

It was discovered that the 389 Directory Server did not properly
handle certain SASL-based authentication mechanisms. A user able to
authenticate to the directory using these SASL mechanisms could
connect as any other directory user, including the administrative
Directory Manager account. This could allow them to modify
configuration values, as well as read and write any data the directory
holds. (CVE-2014-0132)

After installing this update, the 389 server service will be restarted

See also :

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 6.5

Family: Scientific Linux Local Security Checks

Nessus Plugin ID: 73013 ()

Bugtraq ID:

CVE ID: CVE-2014-0132

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now