389 Directory Server CVE-2016-5416 Information Disclosure Vulnerability

Bugtraq ID:	99097
Class:	Design Error
CVE:	CVE-2016-5416
Remote:	Yes
Local:	No
Published:	Jun 16 2017 12:00AM
Updated:	Jun 16 2017 12:00AM
Credit:	Adam Mariš
Vulnerable:	Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 7 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 7 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 7 Redhat Enterprise Linux Desktop 6 Fedoraproject 389 Directory Server -
Not Vulnerable:

389 Directory Server CVE-2016-5416 Information Disclosure Vulnerability

389 Directory Server is prone to an information-disclosure vulnerability.

Remote attackers can exploit this issue to gain access to sensitive information that may aid in further attacks.

389 Directory Server CVE-2016-5416 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

389 Directory Server CVE-2016-5416 Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

389 Directory Server CVE-2016-5416 Information Disclosure Vulnerability

References:

• 389 Directory Server Homepage (389 Directory Server)
  
• #48852 RFE: TargetObjectClass for aci (pagure)
  
• Bug 1349540 - (CVE-2016-5416) CVE-2016-5416 389-ds-base: ACI readable by anonymo (Redhat)
  
• CVE-2016-5416 (Redhat)
  
• RHSA-2016:2594-1 (Redhat)
  
• RHSA-2016:2765-1 (Red Hat)