CVE-2014-0132 in 389 Directory Server

Summary

The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SASL/GSSAPI bind.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/03/2013
• Disclosure: 03/18/2014
• Moderation: VulDB entry created
• Entries: 1: VDB-66701
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 6.3
• EPSS: 0.00573
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-0132
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-0132
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-0132/