CVE-2013-0336 in FreeIPA
Summary
The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
12/06/2012
Disclosure
11/03/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 72787 | Red Hat FreeIPA ipapwd_chpwop input validation | 20 | Not defined | Official fix | CVE-2013-0336 |