漏洞类别:OEL
漏洞等级:
漏洞信息
Oracle Enterprise Linux has released security update for 389-ds-base to fix the vulnerabilities.
Affected Products:
Oracle Linux 6
漏洞危害
A user with no access to objects in certain LDAP sub-tree could send LDAP ADD operations with a specific object name. The error message returned to the user was different based on whether the target object existed or not.
解决方案
To resolve this issue, upgrade to the latest packages which contain a patch. Refer to Oracle Enterprise Linux advisoryOracle Linux 6 for updates and patch information.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论