Scientific Linux Security Update : Important: 389-Ds-Base Security Update on SL7.x srpm/x86_64

High Nessus Plugin ID 83174


The remote Scientific Linux host is missing one or more security updates.


A flaw was found in the way the Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. (CVE-2015-1854)

After installing this update, the 389 server service will be restarted automatically.


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 83174

File Name: sl_20150428_Important__389_Ds_Base_Security_Update_on_SL7_x.nasl

Version: $Revision: 2.1 $

Type: local

Agent: unix

Published: 2015/05/01

Modified: 2015/05/01

Dependencies: 12634

Risk Information

Risk Factor: High

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2015/04/28

Reference Information

CVE: CVE-2015-1854